Ensure not use npm insall in the run command

A npm install script is used. Using npm ci instead is highly recommended.

Risk Level: medium
Platform: Github
Spectral Rule ID: GHAC014