chore(ci): pin npm to 12.0.2 and add supply-chain cooldown

.github/workflows/playwright-visual-regression.yml

@@ -32,6 +32,9 @@ jobs:
         with:
           node-version: 22
 
+      - name: Update NPM
+        run: npm install -g npm@12.0.2
+
       - name: Enable Corepack
         run: |
           corepack enable

.github/workflows/pr.yml

@@ -33,6 +33,9 @@ jobs:
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # 7.0.0
         with:
           node-version: 22
+      - name: Update NPM
+        run: npm install -g npm@12.0.2
+
       - name: Enable Corepack
         run: |
           corepack enable

.github/workflows/prod.yml

@@ -32,6 +32,9 @@ jobs:
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # 7.0.0
         with:
           node-version: 22
+      - name: Update NPM
+        run: npm install -g npm@12.0.2
+
       - name: Enable Corepack
         run: |
           corepack enable

.github/workflows/vale.yml

@@ -22,6 +22,9 @@ jobs:
         with:
           node-version: 22
 
+      - name: Update NPM
+        run: npm install -g npm@12.0.2
+
       - run: npm install -g mdx2vast
 
       - name: Run Vale

.npmrc

@@ -0,0 +1,5 @@
+# Supply-chain cooldown: refuse dependency versions published <7 days ago (npm 12+).
+# Own packages are exempt so same-day @midnight-ntwrk releases stay installable.
+min-release-age=7
+min-release-age-exclude[]=@midnight-ntwrk/*
+min-release-age-exclude[]=@midnightntwrk/*