Improve scriptaudit CI package checks

[rogerchappel]

What changed

• Removes stale placeholder TODO guidance from the CI Node check path.
• Keeps CI focused on the package's real verification commands instead of template messaging.

Why it matters

The workflow now reads as intentional release hygiene for scriptaudit, which makes public CI more credible and easier to maintain.

Verification

• npm install/npm ci: pass
• npm run check --if-present: pass
• npm test --if-present: pass
• npm run package:smoke --if-present: pass

Remaining limitations

• No package was published and no release tag was created.