fix: add --no-workspaces to npm whoami

[hongaar]

I'm using semantic-release with a monorepo which is not officially supported but discussed (e.g. semantic-release/semantic-release#1688).

I've tried various alternative but each of them gave me an uncomfortable feeling and after reading through #482 I settled with the seemingly simple option of only using semantic-release together with this .npmrc:

workspaces = true
workspaces-update = false

There's currently one issue blocking me from using this approach. Executing npm whoami with the above .npmrc yields an error, described in #470.

This issue could be resolved by modifying lib/verify-auth.js slightly:

-      const whoamiResult = execa('npm', ['whoami', '--userconfig', npmrc, '--registry', registry], {
+      const whoamiResult = execa('npm', ['whoami', '--userconfig', npmrc, '--registry', registry, '--no-workspaces'], {

The NPM docs mention:

Explicitly setting this to false will cause commands like install to ignore workspaces altogether

I have verified that this flag has no adverse effect, running it on monorepos and non-monorepos both with and without the flag yield the same output.

[DerYeger]

This would be a welcome change, as I'm also blocked by the current behavior.

[hongaar]

Since I use yarn for all my (mono)repos, I created semantic-release-yarn which supports monorepos natively