Add a GitHub Actions workflow that recomputes prefetch-npm-deps from package-lock.json and updates nix/upstream-sources.json so Nix builds stay aligned without manual hash edits.
cucadmuh