build: pin npm to version 10.8.2

[gkc]

- What I did
build: pin npm to version 10.8.2 because of this which is caused by this

- How I did it
See commits

- How to verify it
Checks pass and dependabot checks pass

[gkc]

@cpswan Even though npm install will now fail with an ugly error unless you are running npm 10.8.2, the code scanner still pops it up as an issue. This feels like a code scanning tool issue to me? since I am now doing precisely what is recommended to package.json to ensure the specific version of npm is being used? However I've just pushed another commit as per this documentation which will ensure that package-lock.json is respected - it may be that that is the actual problem being flagged by the code scanning tool here.