chore: keep lockfile registry-agnostic

[peakematt]

HELP-722 requires committed public SDK lockfiles to be independent of the registry used to generate them. The current lockfile records registry-specific resolved URLs, which couples it to the effective install registry.

This adds omit-lockfile-registry-resolved=true and regenerates the existing lockfile without changing dependencies.

Verification found 721 registry resolved entries removed and all 721 integrity values preserved. Versions, package records, dependency relationships, non-registry resolutions, and lockfile version are unchanged. There are zero Socket Firewall host references and zero semantic verifier violations.

The branch was regenerated and checked with Node v24.20.0 and npm 11.19.0:

npm install --package-lock-only --ignore-scripts --no-audit --no-fund
npm ci --registry=https://registry.npmjs.org/
npm run prettier
npm run lint
npm run typecheck
npm run build
npm test -- --coverage

The clean public-registry install left the lockfile unchanged. This draft should remain unmerged until the earlier workos-node rollout and downstream lockfile-command validation are complete; no reviewer action is requested yet.

HELP-722: https://linear.app/workos/issue/HELP-722

[linear-code]

HELP-722

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[greptile-apps]

Greptile Summary

This PR makes the committed npm lockfile registry-agnostic without changing dependency versions or relationships.

• Adds omit-lockfile-registry-resolved=true to the repository npm configuration.
• Removes registry-specific resolved URLs while retaining package integrity metadata.

Confidence Score: 5/5

The PR appears safe to merge when the explicitly noted rollout dependency is complete.

The changed npm configuration is recognized across the repository’s supported environments, and the lockfile update removes only registry-specific resolution metadata while preserving dependency semantics and integrity checks.

Important Files Changed

Filename	Overview
.npmrc	Adds an npm setting supported by the repository’s Node/npm range to omit registry-derived lockfile URLs.
package-lock.json	Removes registry-specific resolved fields without altering dependency versions, relationships, or integrity values.

_{Reviews (1): Last reviewed commit: "chore: keep lockfile registry-agnostic" | Re-trigger Greptile}