ci: update scripts to use npm ci instead of npm install

Updating instructions to use npm ci instead of npm install Moving fossa scan to this repo as suggested by OSDU team