github: npm install-time security and GAT bypass2fa deprecation

npm v12 is now generally available and tagged latest. It enables the install-time security defaults announced in June and starts deprecating GAT bypass2fa.

• Source: GitHub