ci: disable the npm signatures audit

[prisis]

Opts these setup steps out of npm audit signatures, which fails on pristine dependency trees due to npm/registry metadata bugs resolving transitive platform packages (e.g. @esbuild/aix-ppc64@0.0.0) and mis-resolves optional peers.

The reusable anolilab/workflows setup action now defaults this to false (anolilab/workflows#527); this repo pins the action by SHA, so set it explicitly to stop it running now. run-npm-audit is unchanged.

Summary by CodeRabbit

• Chores
  • Preview and semantic releases no longer run the signatures audit during setup. This changes the release workflow; no end-user-facing features or fixes are included.

[github-actions]

Thank you for following the naming conventions! 🙏

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 6ce4fd9b-4664-4020-bd37-7c788f87c3be

📥 Commits

Reviewing files that changed from the base of the PR and between a13be57 and af41a53.

📒 Files selected for processing (2)

• .github/workflows/preview-release.yaml
• .github/workflows/semantic-release.yml

 _______________________________________________________________________
< Your 'optimization' optimized the readability right out of existence. >
 -----------------------------------------------------------------------
  \
   \   (\__/)
       (•ㅅ•)
       / 　 づ

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}