Change npm install to npm ci in contributing guide (#31859)

`ci` installs exactly what's in `package-lock.json` where as `install` installs compatible versions.

Given today's [issue](https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised) it's probably best to tell uses to use `ci` and not `install`