Scope npm registry to @aetoskia in drone pipeline

The registry was set globally, forcing public transitive deps through the
private Verdaccio (no uplink), which 404'd `npm install`. Scope it to
`@aetoskia:registry` so only @aetoskia/* resolve from the private registry.
Also correct the stale package-lock name and ignore local .npmrc.

package-lock.json

@@ -1,11 +1,11 @@
 {
-  "name": "doc-weaver",
+  "name": "@aetoskia/doc-weaver",
   "version": "0.1.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
-      "name": "doc-weaver",
+      "name": "@aetoskia/doc-weaver",
       "version": "0.1.0",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.17.4",