ci: opt the consumer test into running node-libcurl's install scripts

pnpm v10 no longer runs dependency install scripts by default — every
package that needs preinstall/install/postinstall now has to be on the
consumer's allow-list. The windows-consumer-install workflow saw the
exact symptom: `pnpm add` reported "Ignored build scripts: node-libcurl"
and the install "succeeded", but vcpkg never ran, so the curl.exe sanity
check threw "vcpkg curl.exe was not found after install".

Opt in two ways so both invocations and any followup script behave the
same: the consumer package.json now declares
`pnpm.onlyBuiltDependencies = ["node-libcurl"]`, and the `pnpm add`
command also passes `--allow-build node-libcurl` (belt-and-braces for
the one-shot install).

This is the same hoop a real pnpm-v10 user has to jump through — so
keeping the workaround in the workflow rather than hiding it behind a
custom action means the CI continues to reflect what consumers
actually experience.

Author: JCMais

.github/workflows/windows-consumer-install.yaml

@@ -64,9 +64,25 @@ jobs:
 
           New-Item -ItemType Directory -Force -Path $consumerRoot
           Set-Location $consumerRoot
-          Set-Content -Path package.json -Value '{"private":true,"type":"commonjs"}'
+          # pnpm v10 blocks dependency install scripts by default. The consumer
+          # has to opt in for any package that needs its preinstall/install/
+          # postinstall to run — and node-libcurl needs all three to run the
+          # vcpkg setup and build the native addon. Without this approval the
+          # install completes "successfully" but leaves the package non-
+          # functional (no vcpkg-installed curl.exe, no native binding).
+          # This is the exact failure mode real pnpm-v10 consumers hit, so we
+          # encode the workaround here rather than masking it.
+          Set-Content -Path package.json -Value (@'
+          {
+            "private": true,
+            "type": "commonjs",
+            "pnpm": {
+              "onlyBuiltDependencies": ["node-libcurl"]
+            }
+          }
+          '@)
 
-          pnpm add $package.FullName --fetch-timeout 300000
+          pnpm add $package.FullName --allow-build node-libcurl --fetch-timeout 300000
 
           $curlExe = Get-ChildItem `
             -Path (Join-Path $consumerRoot 'node_modules/node-libcurl') `