fix(ci): retry the npm audit, so an unreachable registry is not read as a finding

fix(ci): retry the npm audit, so an unreachable registry is not read as a finding #478