deploy: add --production flag to npm install