Update npmrc - hardening

[notsure]

engine-strict=true ---> already exists
min-release-age=7 ---> make sure its not too new
strict-allow-scripts=true --> block post install scripts and allow only those we really want