Merge pull request #4917 from tdonohue/unpin_npm

[Port dspace-9_x] Unpin `npm` but specify `npm` as `packageManager` in `package.json` to fix `dependabot` issues

Author: tdonohue

package-lock.json

@@ -232,7 +232,7 @@
     "webpack-cli": "^6.0.1"
   },
   "engines": {
-    "node": ">=20.0.0 <25.0.0",
-    "npm": "^10"
-  }
+    "node": ">=20.0.0 <25.0.0"
+  },
+  "packageManager": "npm@10.9.4"
 }