npm: add a slim feature

[Hansehart]

Ship npm as its own slim feature so an image that already carries a Node runtime can pin npm alone, reusing the stateDir cache and global prefix handling the node feature does today.