Bumping npm-install, fixing deep links

• Bumping npm-install to v1.6.0 to address GitHub set-env security vulnerability (see: https://github.blog/changelog/2020-10-01-github-actions-deprecating-set-env-and-add-path-commands/)
• Restore ability to deep link