Use npm ci when building

[jutaz]

This ensures that the dependencies installed upon a build will be same ones as defined in package-lock.json. Using npm install could result in different-than-expected dependencies, which makes things hander to debug and/or pulling in potential breaking changes.