Don't use postinstall

[shannonwells]

Copied from frequency issue

Feature Description

Details

Some supply chain attacks are using postinstall scripts in the CI to infect dev machines.

AC

• make sure we are not depended on any of preinstall, install, postinstall in our packages
• replace npm install with npm install --ignore-scripts in all github actions and make files or other scripts
• replace npm ci with npm ci --ignore-scripts in all github actions and make files or other scripts