refactor: adding allowScripts for npm v12

[annipi]

SUP-759

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details

Scanned Files

[Copilot]

Pull request overview

This PR updates the project’s npm metadata/config to support newer npm behavior by explicitly disabling install scripts for @scarf/scarf, aligning Node engine metadata, and making minor package metadata adjustments.

Changes:

• Bumps the package version from 4.0.0 to 4.0.1.
• Adds allowScripts to disable @scarf/scarf install scripts (commonly used for telemetry) and removes .npmrc’s scripts-prepend-node-path.
• Updates package-lock.json metadata (including Node engine requirement) and reformats overrides for readability.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File	Description
package.json	Version bump + adds allowScripts to disable @scarf/scarf scripts; reformats overrides.
package-lock.json	Updates lockfile metadata to 4.0.1 and aligns the root package Node engine to >=20.0.0.
.npmrc	Removes scripts-prepend-node-path, leaving only package-lock=true.