PNPM config migration

[rfontanarosa]

Relocates onlyBuiltDependencies from the root package.json pnpm field into pnpm-workspace.yaml (alongside the existing catalogs) and pins pnpm to 10.30.3. The allowlist is unchanged; this aligns with pnpm's consolidation of settings into the workspace file — required since pnpm v11 no longer reads the pnpm field from package.json.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 62.49%. Comparing base (de5906f) to head (48df3bd).
⚠️ Report is 4 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #2553   +/-   ##
=======================================
  Coverage   62.49%   62.49%           
=======================================
  Files         119      119           
  Lines        2861     2861           
  Branches      426      426           
=======================================
  Hits         1788     1788           
  Misses       1012     1012           
  Partials       61       61           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.