The scaffold shipped with installs pinned to --package-lock=false, on a
misreading of AGENTS.md that has since been corrected. npm ci needs this file,
and npm ci is how every task worktree spins up.
Also adds 'build' to the commit-msg type list; it is a standard conventional
type and its absence rejected this very commit.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Marcos Paulo