update package-lock test

[Bojan131]

Note

Low Risk
CI-only changes limited to workflow triggers and npm lockfile validation; main risk is false failures due to Node/npm version differences or lockfile regeneration behavior.

Overview
The check-package-lock GitHub Actions workflow now only runs when package.json or package-lock.json change (on main pushes and all PRs), reducing unnecessary CI runs.

It upgrades the job to Node 20.x and adds a PR-only step that regenerates package-lock.json (npm install --package-lock-only) and fails the build if the committed lockfile is out of date relative to package.json.

^{Written by Cursor Bugbot for commit 4030151. This will update automatically on new commits. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}