Add npm-shrinkwrap.json on every release

[AllanOricil]

Add npm-shrinkwrap.json on every release. This will ensure nobody gets hacked because of updates from transient dependencies during global installs as it will lock all dependencies like a package-lock would, but for consumers.

npm-shrinkwrap.json | npm Docs

Node-RED releases don't have a node-shrinkwrap.json yet.

[TotallyInformation]

Apparently only occurs for local file/folder installs so should still be good for normal installs:

[AllanOricil]

Good catch