[actions] reuse common workflows

See inspect-js/is-arguments#38

.github/workflows/node-pretest.yml

@@ -0,0 +1,7 @@
+name: 'Tests: pretest/posttest'
+
+on: [pull_request, push]
+
+jobs:
+  tests:
+    uses: ljharb/actions/.github/workflows/pretest.yml@main

.npmrc

@@ -1,3 +1,4 @@
 package-lock=false
 allow-same-version=true
 message=v%s
+audit-level=high

package.json

@@ -9,6 +9,7 @@
 	"scripts": {
 		"pretest": "npm run --silent lint",
 		"lint": "eslint --ext=js,mjs . 'bin/**'",
+		"posttest": "aud --production",
 		"version": "auto-changelog && git add CHANGELOG.md",
 		"postversion": "auto-changelog && git add CHANGELOG.md && git commit --no-edit --amend && git tag -f \"v$(node -e \"console.log(require('./package.json').version)\")\""
 	},
@@ -33,6 +34,7 @@
 	},
 	"devDependencies": {
 		"@ljharb/eslint-config": "^20.0.0",
+		"aud": "^1.1.5",
 		"auto-changelog": "^2.3.0",
 		"eslint": "^8.4.1"
 	},