fix(build): always run npm ci, drop the lockfile-timestamp gate

The previous "only reinstall when the lockfile is newer than
node_modules/.package-lock.json" check was overengineered: `npm ci`
is itself the right tool for this (it's idempotent w.r.t. the lockfile
and fast on warm caches with `--prefer-offline`). Just run it every
time and let npm decide.

Author: dschmidt

scripts/compile-spec.sh

@@ -7,10 +7,6 @@ set -eu
 
 cd "$(dirname "$0")/.."/spec
 
-# Reinstall when node_modules is missing OR the lockfile is newer than
-# the install marker (renovate bumps shouldn't be silently ignored).
-if [ ! -d node_modules ] || [ package-lock.json -nt node_modules/.package-lock.json ]; then
-  npm ci --prefer-offline --no-audit --no-fund
-fi
+npm ci --prefer-offline --no-audit --no-fund
 
 npx tsp compile .