[Infrastructure] Add a workflow to validate package-lock.json when changes are introduced. (#54688)

When package-lock.json is updated, we will run npm ci --prefer-online to force checking the contents of the package-lock.json against the AzDo feeds.

.github/workflows/validate-npm-package-lock-json.yml

@@ -0,0 +1,30 @@
+name: Validate package-lock.json against source feeds
+
+on:
+  # Manual run
+  workflow_dispatch:
+  pull_request:
+    paths:
+      - 'package-lock.json'
+
+jobs:
+  validate-package-lock-json:
+    name: 'Validate package-lock.json against source feeds'
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          submodules: false
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20.x
+
+      - name: Run npm ci to validate package-lock.json against the feed
+        shell: pwsh
+        id: npm-install-script
+        run: npm ci --prefer-online --fetch-retries 5