SonarCloud security issues in release workflows

[Ishita-190]

SonarCloud reports multiple security issues in the release workflows related to package installation and execution.

Files:
.github/workflows/if-nodejs-release.yml
.github/workflows/release-announcements.yml

Proposed Changes:

• Add --ignore-scripts to the npm install command.
• Replace the npx command with a safer package execution method.
• Define the exact package version in .github/workflows/release-announcements.yml to avoid installing unverified releases.

References these issues

Tagging @AceTheCreator for review

[github-actions]

Welcome to AsyncAPI. Thanks a lot for reporting your first issue. Please check out our contributors guide and the instructions about a basic recommended setup useful for opening a pull request.
Keep in mind there are also other channels you can use to interact with AsyncAPI community. For more details check out this issue.