fix(ci): run npm install befire npm audit to provide temporary package-lock.json

Author: jankapunkt

.github/workflows/tests-release.yml

@@ -27,6 +27,7 @@ jobs:
     - uses: actions/setup-node@v2
       with:
         node-version: '12'
+    - run: npm i # install to create local package-lock.json but don't cache
     - run: npm audit --production # no audit for dev dependencies
 
   # STEP 2 - basic unit tests