fix(ci): commit root package-lock.json (npm ci requires it)

All 4 workflow runs (CI #1-3 + Release #1) failed at ~7s on the
'npm ci' step: scaffold .gitignore wrongly ignored package-lock.json
(carried over from spike habit), so CI had no lockfile to install
from. Un-ignore + commit the lockfile (standard for a CI repo).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: SoliEstre

.gitignore

@@ -1,5 +1,4 @@
 node_modules/
-package-lock.json
 .DS_Store
 *.log
 .idea/