fix: don't use --package-lock-only for npm install (#1544)

* Revert "fix: disable reusing existing package-lock.json when upgrading (#1530)"

This reverts commit 2728e399.

* switch from —package-lock-only to —ignore-scripts

Removing `--package-lock-only` option from npm installs due to https://github.com/npm/npm/issues/19852

Pretty sure this fixes #1495