security-gate job was downloading ~300MB of React/Vite npm packages unnecessarily. casan-step.mjs uses only node:child_process, node:fs, node:os (built-ins) — no npm packages needed. Removing npm ci -w frontend saves ~300MB peak RAM in CI. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>