GitHub workflows are broken

[chmac]

See #2676 for context.

Some references:

• Installing npm dependency from public GitHub repository fails actions/setup-node#214
• [BUG] NPM v7 uses SSH instead of an explicit HTTPS for GitHub repos npm/cli#2610

Essentially, the git+https://github.com URL in package.json is getting converted by npm of its own accord into a git+ssh url, which in turn fails. There are a few potential solutions:

• Add a username and password to the git+https:// url
  • Apparently this stops it getting converted to an ssh url
  • Unclear if there is any username / password which will work
• Add a step in the workflow to reconfigure git to always use https