The release workflow uses 'npm ci' which requires package-lock.json to exist. Force-add package-lock.json despite root gitignore for reproducible builds. Fixes workflow failure in run 19281878604.