Restore public npm registry URLs in lockfile

The RN 0.87 dependency bumps were installed through a private pull-through
registry mirror, which rewrote 61 `resolved` URLs in package-lock.json to
`https://sfw-prod.tail9d0a9e.ts.net/npm/...`. That host is unreachable from
CI, so every `npm ci` failed with ENOTFOUND and took down Lint, all Unit
tests, and all Test app jobs before they could run.

Rewrite the host back to `https://registry.npmjs.org/`. The `integrity`
hashes are content-based and unchanged, so the entries stay valid.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: kraenhansen