feat(install-scripts): prune unused allowScripts entries (#9651)

`npm install-scripts prune` removes `allowScripts` entries that no
longer apply: the package isn't installed, or it no longer has an
install script. Covers both approvals and denials, and `--dry-run`
previews without writing.

Closes #9561