Add upstream tests to gitlab ci

- dont ignore package-lock (needed for npm ci)
- use puppeteer container
- use junit for proper gitlab tests reports integration
- chrome without sandbox to not require SYS_ADMIN docker cap (cf
  https://pptr.dev/guides/docker)