Mk/Uses/npm.mk: Move --frozen-lockfile from NPM_FETCH_FLAGS to NPM_EXTRACT_FLAGS

pnpm fetch does not read a package manafest and only relies on a
lockfile. So specifying --frozen-lockfile here is redundant. We need
the flag when we extrace (install) node modules from a pre-fetched
node modules cache.