Add .npmrc with ignore-scripts=true to block dependency install hooks (#29)

Prevents npm from auto-running dependency lifecycle scripts
(preinstall/install/postinstall) on install, mitigating the
Miasma/Shai-Hulud npm supply-chain worm class.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: dbutts29

.npmrc

@@ -0,0 +1 @@
+ignore-scripts=true