setup_nodejs: bypass npm allowScripts policy globally on npm >=11

misc/tools.func

@@ -7732,6 +7732,16 @@ setup_nodejs() {
     fi
   fi
 
+  # npm >=11 skips native-module install/rebuild scripts (better-sqlite3, bcrypt,
+  # argon2, ...) unless each package is explicitly allowlisted, silently leaving
+  # native deps unbuilt. Bypass the policy globally instead of allowlisting
+  # per script.
+  local npm_major
+  npm_major=$(npm -v 2>/dev/null | cut -d. -f1)
+  if [[ "${npm_major:-0}" -ge 11 ]]; then
+    $STD npm config set dangerously-allow-all-scripts true --location=global 2>/dev/null || true
+  fi
+
   # Set a safe default heap limit for Node.js builds if not explicitly provided.
   # Priority:
   #   1) NODE_OPTIONS (caller/user override)