Fix update-bundle workflow

[aibaars]

Risk assessment

For internal use only. Please select the risk level of this change:

• Low risk: Changes are fully under feature flags, or have been fully tested and validated in pre-production environments and are highly observable, or are documentation or test only.
• High risk: Changes are not fully under feature flags, have limited visibility and/or cannot be tested outside of production.

Merge / deployment checklist

• Confirm this change is backwards compatible with existing workflows.
• Consider adding a changelog entry for this change.
• Confirm the readme and docs have been updated if necessary.

[Copilot]

Pull Request Overview

This PR fixes the update-bundle workflow by adding a missing dependency installation step. The workflow is triggered when a CodeQL bundle prerelease is published and automates the process of updating the default bundle version.

• Adds npm ci step to install dependencies before running build commands

[henrymercer]

Thanks! Could we also add a:

      - name: Set up Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20.x'
          cache: 'npm'

step? That'll cache the dependencies and should speed things up.

[henrymercer]

Thanks!