ci: execute eyes-storybook-in-ci-only

[chrispulsinelli-okta]

OKTA-849447

Summary

A CI and install-time change that removes the dependency of @applitools/eyes-storybook as an installable package and instead makes it a CI-runtime executable.

This addresses the vuln ticket linked above to prevent puppeteer (a dependency of eyes-storybook) from running its postinstall script whenever the dependencies of the odyssey repo are installed.

More info here: https://socket.dev/npm/package/puppeteer/alerts/23.5.1?alert_name=installScripts

The fix here is to execute eyes-storybook as a runtime executable only when needed in CI, by having yarn download and execute eyes-storybook when the script ci:visualRegressionTest is invoked.

The change also impacts the invocation of dev:visualRegressionTest locally on dev machines and there should be no change in how it runs.

Testing & Screenshots

• I have confirmed this change with my designer and the Odyssey Design Team.