bump/workflows/npm audit fix

[max-nextcloud]

• chore(workflows): update npm-audit-fix
• chore(workflows): no build in npm-audit-fix

This will prevent failures on the non existing master branch.
Also stop building the js artifacts for the PR.

[max-nextcloud]

I wonder if we should change the build script entry in package.json to some other name instead.
That would turn npm run build --if-present into a noop and remove the need to change these scripts.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 52.32%. Comparing base (ef33a6b) to head (c253378).
Report is 17 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #7347   +/-   ##
=======================================
  Coverage   52.32%   52.32%           
=======================================
  Files         482      482           
  Lines       42043    42043           
  Branches     1049     1049           
=======================================
  Hits        22000    22000           
  Misses      19940    19940           
  Partials      103      103           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.