fix: publish npm-shrinkwrap.json to pin transitive dependencies

[pchuri]

Description

Convert package-lock.json to npm-shrinkwrap.json so that published installs resolve the exact dependency versions tested in CI, preventing supply-chain drift.

package-lock.json is not included in npm publishes, so users installing via npm install -g confluence-cli resolve dependencies from package.json semver ranges. npm-shrinkwrap.json is the publishable lockfile and is recommended by npm for CLI tools.

Closes #86

Type of Change

• Bug fix (non-breaking change which fixes an issue)

Testing

• Tests pass locally with my changes
• New and existing unit tests pass locally with my changes

Checklist

• My code follows the style guidelines of this project
• I have performed a self-review of my own code
• My changes generate no new warnings

[github-actions]

🎉 This PR is included in version 1.27.7 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀