chore: omit registry URLs from npm lockfiles

[Jamie Magee (JamieMagee)]

Purpose

• Add omit-lockfile-registry-resolved=true to the Application Insights sample's .npmrc.
• Regenerate the lockfile without changing its dependency graph, versions, integrity values, lockfileVersion, or other metadata.
• Remove registry resolved fields so Azure Artifacts feed URLs are not persisted.

Does this introduce a breaking change?

[ ] Yes
[x] No

Pull Request Type

[ ] Bugfix
[ ] Feature
[ ] Code style update (formatting, local variables)
[ ] Refactoring (no functional changes, no api changes)
[ ] Documentation content changes
[x] Other: lockfile metadata hardening

How to Test

• Get the code

git clone https://github.com/JamieMagee/app-service-labs.git
cd app-service-labs
git checkout fix/omit-lockfile-registry-resolved
cd samples/monitor-app-insights-node

• Test the code

npx --yes npm@10.9.8 config get omit-lockfile-registry-resolved
npx --yes npm@10.9.8 install --package-lock-only --ignore-scripts
npx --yes npm@10.9.8 ci --ignore-scripts

What to Check

• The config command returns true.
• A second lockfile regeneration makes no changes.
• ms-feed-2, ms-feed-12, ms-feed-17, and ms-feed-25 are absent from the lockfile.
• npm ci succeeds. This sample does not define a test script.

Other Information

The lockfile keeps the same dependency graph, versions, integrity values, and lockfileVersion.