ci: install exact dependencies before security builder validation

Author: niakw

.github/workflows/final-security-hardening-once.yml

@@ -10,17 +10,30 @@ on:
 permissions:
   contents: write
 
+concurrency:
+  group: final-security-hardening-builder
+  cancel-in-progress: true
+
 jobs:
   build:
     runs-on: ubuntu-latest
-    timeout-minutes: 10
+    timeout-minutes: 12
     steps:
       - name: Checkout security hardening branch
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: chore/final-security-hardening
           fetch-depth: 0
 
+      - name: Set up Node.js
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        with:
+          node-version: "24"
+          package-manager-cache: false
+
+      - name: Install exact dependency tree without lifecycle scripts
+        run: npm ci --ignore-scripts --no-audit --no-fund
+
       - name: Materialize reviewed hardening
         run: python3 scripts/build_final_security_hardening_once.py