fix(ci): bound advisory network latency

Author: erwinmsmith

.github/workflows/tool-mcp-gates.yml

@@ -29,7 +29,7 @@ jobs:
         with:
           node-version: 22.22.3
           cache: npm
-      - run: npm ci
+      - run: npm ci --no-audit
       - name: Skill filesystem and server composition
         run: >-
           npm run test:unit -- --runInBand
@@ -75,7 +75,7 @@ jobs:
         with:
           node-version: 22.22.3
           cache: npm
-      - run: npm ci
+      - run: npm ci --no-audit
       - run: npm run audit
       - run: npm run test:audit-policy
       - run: npm run lint

scripts/check-npm-audit.mjs

@@ -14,7 +14,7 @@ function run() {
   const audit = spawnSync(npmCommand, ['audit', '--json'], {
     encoding: 'utf8',
     maxBuffer: 16 * 1024 * 1024,
-    timeout: 180_000,
+    timeout: 420_000,
   });
 
   if (audit.error) {