LTS-5442: set min-release-age in .npmrc (Semgrep npm-missing-minimum-release-age)

Matches the playwright and webdriverio samples: npm refuses package versions
published less than 7 days ago, which blunts freshly-hijacked releases.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Author: MihirR-BS

.npmrc

@@ -4,3 +4,4 @@ save-exact=true
 engine-strict=true
 legacy-peer-deps=false
 audit-level=high
+min-release-age=7