Hypatia content_patterns/npx_in_workflow: npx/npm in CI config (9 instances, stale rule + vendored)

[hyperpolymath]

npx_in_workflow fires on vendored satellite example CI plus .github/copilot/coding-agent.yml. Note the rule text itself is stale (it recommends Deno, retired Sept 2026) — the rule needs an upstream refresh, and the vendored examples are not live CI.

Acknowledged in .hypatia-baseline.json (hypatia triage 2026-09-22, expires 2026-12-22) by the main-red fix-forward. This issue is the tracking item; closing it requires either remediating the instances or renewing the acknowledgement.

Instances (9):

• content_patterns/npx_in_workflow medium — .github/copilot/coding-agent.yml
  npx / npm run banned in CI -- use deno task or deno run instead (npm fully banned 2026-05-25)
• content_patterns/npx_in_workflow medium — rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/rescript-deno-ci.yml
  npx / npm run banned in CI -- use deno task or deno run instead (npm fully banned 2026-05-25)
• content_patterns/npx_in_workflow medium — rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.gitlab-ci.yml
  npx / npm run banned in CI -- use deno task or deno run instead (npm fully banned 2026-05-25)
• content_patterns/npx_in_workflow medium — rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/Justfile
  npx / npm run banned in CI -- use deno task or deno run instead (npm fully banned 2026-05-25)
• content_patterns/npx_in_workflow medium — rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/Justfile
  npx / npm run banned in CI -- use deno task or deno run instead (npm fully banned 2026-05-25)
• content_patterns/npx_in_workflow medium — rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/Justfile
  npx / npm run banned in CI -- use deno task or deno run instead (npm fully banned 2026-05-25)
• content_patterns/npx_in_workflow medium — rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/Justfile
  npx / npm run banned in CI -- use deno task or deno run instead (npm fully banned 2026-05-25)
• content_patterns/npx_in_workflow medium — rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/rescript-deno-ci.yml
  npx / npm run banned in CI -- use deno task or deno run instead (npm fully banned 2026-05-25)
• content_patterns/npx_in_workflow medium — rhodium-standard-repositories/satellites/palimpsest-license/TOOLS/post-sync.sh
  npx / npm run banned in CI -- use deno task or deno run instead (npm fully banned 2026-05-25)