So answering your first question, "dev": true in package-lock.json means this dependency won’t be installed by npm install/npm ci when running in production mode.
Having dependencies used only for local development environment marked with "dev": true and then using --production in your CI might save you some build time.
From documentation https://docs.npmjs.com/cli/install#description:
By default,
npm installwill install all modules listed as
dependencies inpackage.json.With the
--productionflag (or when theNODE_ENVenvironment
variable is set toproduction), npm will not install modules listed
indevDependencies.