Fix npmscript fixture lockfile: use registry.npmjs.org URLs

Dependabot regenerated the lockfile with pkgs.dev.azure.com/dnceng URLs,
but the dnceng dotnet-public-npm mirror doesn't yet have express@4.22.2
(returns 401). The aspire publish-built Docker image's `npm ci` step then
fails to fetch express. The main branch lockfile uses registry.npmjs.org
throughout; regenerating it preserves that pattern while keeping the
bumped express/body-parser/qs versions that resolve the qs security advisory.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: IEvangelist