Disable npm lifecycle scripts and fix npx usage for security

- Add --ignore-scripts flag to npm install
- Replace npx prisma with yarn prisma

Related to PDE-128

Co-authored-by: Ona <no-reply@ona.com>

Author: jespino

.gitpod.yml

@@ -3,13 +3,13 @@
 image: gitpod/workspace-postgres
 
 tasks:
-  - init: npm install
+  - init: npm install --ignore-scripts
     command: |
       export HMR_HOST=`gp url 3000`
       npm run dev
     env:
       DATABASE_URL: postgres://gitpod@localhost/todos
-  - command: npx prisma studio
+  - command: yarn prisma studio
     env:
       DATABASE_URL: postgres://gitpod@localhost/todos