I think I'll commit node-modules to git and call it a day

Do note that you also need plugins. The

npm install

process automatically acquired these - but if you are skipping that step on a server - you’ll need to also acquire or checkin platform-specific plugins - which are not particularly small.

where does it save plugins?

~/.pulumi/plugins/

(also configurable I believe with an env var)