fix: restore package-lock.json from origin/main, not stale local main

The previous restore (899c467) used the local main ref, which predated
the n8n 2.30.x dependency update - npm ci failed with missing @smithy/*
entries. origin/main's lockfile is what CI validated on #933; re-apply
only the 2.65.0 version fields on top of it.

Conceived by Romuald Członkowski - www.aiadvisors.pl/en

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: czlonkowski