npm ci Says package.json and package-lock.json Are Not in Sync: Causes, Fixes, and How pnpm and Yarn Compare

Why npm ci says package.json and package-lock.json are out of sync, how to fix it, and how npm, pnpm and Yarn enforce lockfiles in CI.