Enforce global npm install to prefix /usr/local with --force and allow-scripts

Dockerfile

@@ -196,11 +196,20 @@ RUN curl -fsSL "https://github.com/oven-sh/bun/releases/latest/download/bun-linu
 # ------------------------------------------
 COPY security/stub-playwright-index.js /tmp/stub-pw.js
 COPY security/stub-playwright-index.mjs /tmp/stub-pw.mjs
-RUN npm config set allow-scripts true && \
-    npm install -g pnpm yarn typescript supergateway@4.1.0 rea-agents@latest hermes-web-ui@0.7.34 && \
-    npm install -g opencode-ai@latest && \
-    npm install -g @anthropic-ai/claude-code@latest && \
-    npm install -g @deepseek-ai/dsh@latest && \
+RUN npm config set ignore-scripts false && \
+    npm config set allow-scripts true && \
+    npm install -g \
+      pnpm \
+      yarn \
+      typescript \
+      supergateway@4.1.0 \
+      rea-agents@latest \
+      hermes-web-ui@0.7.34 \
+      opencode-ai@latest \
+      @anthropic-ai/claude-code@latest \
+      @deepseek-ai/dsh@latest \
+      --prefix /usr/local \
+      --force && \
     chmod +x /usr/local/bin/* 2>/dev/null || true && \
     ln -sf /usr/local/bin/dsh /usr/local/bin/deepseek-harness 2>/dev/null || true && \
     cp /tmp/stub-pw.js /usr/local/lib/node_modules/rea-agents/node_modules/playwright-core/index.js 2>/dev/null || true && \