feat: add ci command for reproducible lockfile install

[maiconfz]

Workflow

Branch pattern: feat/<issue-number>-ci-command (use the assigned number and a short lowercase kebab-case slug)

Draft PR: Open with gh pr create --draft before implementation commits. Use Closes #<issue-number> in the PR ## Related Issues section.

Summary

Add agents-repo ci for reproducible lockfile install (future / post-MVP).

Motivation

npm ci parity — install exactly from agents-lock.json in CI pipelines without semver re-resolution drift.

Proposed scope

In scope:

• Install exactly from agents-lock.json
• Fail if agents.json packages ranges disagree with lock without --force
• Non-interactive CI usage documented

Out of scope:

• MVP milestone delivery

Impacted areas

• src/modules/install/
• specs/lock-schema.md
• docs/CLI_WORKFLOW.md

Done criteria

• Spec + issue body reference lock-schema.md
• No implementation in MVP milestone

Milestone

M5 — Future

Depends on

Bulk install issue