ci Keep js deps up-to-date (npm ci)

tox will re-install deps if our `deps` change, but not if `package.json`
changes (or, say, the version of Node/npm).

ci/node-install.sh

@@ -3,9 +3,10 @@ set -eu
 
 if [ -f "$TOX_ENV_DIR/bin/node" ]; then
     echo Node and friends already installed.
+    npm ci
     exit 0
 fi
 
-nodeenv --prebuilt -p --node 18.20.4 "$TOX_ENV_DIR"
-npm install -g npm@latest
+nodeenv --prebuilt -p --node "$NODE_VERSION" "$TOX_ENV_DIR"
+npm install -g "npm@$NPM_VERSION"
 npm ci

tox.ini

@@ -11,6 +11,9 @@ skip_missing_interpreters = false
 description = base environment
 package = wheel
 wheel_build_env = .pkg
+set_env =
+    NODE_VERSION=18.20.4
+    NPM_VERSION=10.9.0
 deps =
     pytest: -r requirements.txt
     eslint,stylelint: nodeenv