ci: unify workflow across branches (add branch-aware upload guard) + sync lock

The workflow already selects PROD vs dev secrets by github.ref_name, so the
upload-skip guard is written as `github.ref_name != 'master'` — the same file
now behaves correctly on both branches (skips upload on master while dev is
down; prod uploads as before). This makes build-and-deploy.yml byte-identical
to master. Also adopt master's package-lock (includes the `engines` root block
that prod's lock was missing) so the lockfiles match too.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: mikim

.github/workflows/build-and-deploy.yml

@@ -56,7 +56,10 @@ jobs:
           fi
 
       - name: Deploy using WA Map Storage
-        if: ${{ env.UPLOAD_MODE == 'MAP_STORAGE' }}
+        # dev server (dev.wa.moss.land) is offline — skip the upload on master until it
+        # returns. The build still runs above, so pushes to master keep validating the code.
+        # prod is unaffected (ref_name != 'master'). Re-enable for master by dropping this guard.
+        if: ${{ env.UPLOAD_MODE == 'MAP_STORAGE' && github.ref_name != 'master' }}
         run: npm run upload-only
 
       - name: Deploy using Github Pages