Integrity files collide when generating node modules

[tobni]

Describe the bug Newer versions of package managers generate integrity files (e.g .package-lock.json, notice the leading .). The current strategy of merging node_modules installations across workspaces will collide in these integrity files, because the digests were generated from subsets, and but the integrity file is in the same location on disk.

Pants version Which version of Pants are you using?

OS Are you encountering the bug on MacOS, Linux, or both?

Additional info

[riisi]

Note - these are called "hidden lockfiles" in npm - https://docs.npmjs.com/cli/v9/configuring-npm/package-lock-json#hidden-lockfiles