ci(publish_site): fix workflow

[Warashi]

What this PR does:

• Use npm ci to install dependencies in the CI
• Ran npm audit fix in the docs directory

Why we need it:

to address the workflow failure
https://github.com/pipe-cd/pipecd/actions/runs/23999586973/job/69993362383#step:6:65

Which issue(s) this PR fixes:

I haven't opened any issue, because this is a small, simple fix.

Does this PR introduce a user-facing change?: No

• How are users affected by this change:
• Is this breaking change:
• How to migrate (if breaking change):

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 29.46%. Comparing base (2db42a4) to head (dc6bb28).

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #6647   +/-   ##
=======================================
  Coverage   29.46%   29.46%           
=======================================
  Files         584      584           
  Lines       62469    62469           
=======================================
  Hits        18409    18409           
  Misses      42636    42636           
  Partials     1424     1424           

Flag	Coverage Δ
.	23.29% <ø> (ø)
.-pkg-app-pipedv1-plugin-analysis	32.43% <ø> (ø)
.-pkg-app-pipedv1-plugin-ecs	30.84% <ø> (ø)
.-pkg-app-pipedv1-plugin-kubernetes	58.35% <ø> (ø)
.-pkg-app-pipedv1-plugin-kubernetes_multicluster	63.39% <ø> (ø)
.-pkg-app-pipedv1-plugin-scriptrun	54.83% <ø> (ø)
.-pkg-app-pipedv1-plugin-terraform	37.95% <ø> (ø)
.-pkg-app-pipedv1-plugin-wait	33.04% <ø> (ø)
.-pkg-app-pipedv1-plugin-waitapproval	52.71% <ø> (ø)
.-pkg-plugin-sdk	50.34% <ø> (ø)
.-tool-actions-gh-release	19.23% <ø> (ø)
.-tool-actions-plan-preview	25.51% <ø> (ø)
.-tool-codegen-protoc-gen-auth	0.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.