* Require pnpm release age and Node 24
- Set pnpm minimumReleaseAge to 2880 minutes and enforce engine checks.
- Pin the workspace to pnpm 11 and require Node 24+ via package metadata.
- Teach CI and release workflows to use the checked-in .node-version.
* Approve pnpm build scripts for CI
- Add the pnpm 11 build-script allowlist needed for frozen CI installs.
- Allow only the dependency install scripts already required by the current lockfile.
* Deny dependency build scripts
- Match the agent-browser pnpm 11 policy by explicitly denying known dependency build scripts.
- Keep minimumReleaseAge enforcement without approving postinstall script execution.
Chris Tate