setup-node with cache: 'npm' fails because the template ships without package-lock.json. README documents the path to switch to 'npm ci' once the downstream repo has a lock file.