fix: separate npm install from fetch_bundle script