Replace npx with pinned npm-tools and add security hardening#21166

Ona-Security-Admin merged 13 commits intomaingitpod-io/gitpod:mainfrom

clu/npm-security-hardeninggitpod-io/gitpod:clu/npm-security-hardeningCopy head branch name to clipboard