fix(workspace): define pnpm catalog so hook 'catalog:' refs resolve

The .claude/hooks/check-new-deps/package.json declares dependencies as 'catalog:' (synced from the canonical hook template), but pnpm-workspace.yaml had no catalog block — every pnpm install since efadd20 (2026-04-27 11:50 UTC) failed with ERR_PNPM_CATALOG_ENTRY_NOT_FOUND_FOR_SPEC, breaking CI on all 9 subsequent runs.

Add a minimal catalog block covering the three Socket fleet packages the hook references: @socketregistry/packageurl-js, @socketsecurity/lib, @socketsecurity/sdk. Mirrors the same pattern used in socket-registry's pnpm-workspace.yaml so the hook template stays drift-free across the fleet.

Author: jdalton

pnpm-lock.yaml

@@ -13,6 +13,15 @@ packages:
   - tools/*
   - vendor/*
 
+# Catalog entries shared across hook workspaces. The hooks live in
+# `.claude/hooks/*` and depend on the same Socket fleet packages the
+# repo itself ships. Pinning them here keeps the entire hook tree in
+# lockstep with the parent without each hook duplicating literal pins.
+catalog:
+  '@socketregistry/packageurl-js': 1.4.2
+  '@socketsecurity/lib': 5.25.1
+  '@socketsecurity/sdk': 4.0.1
+
 allowBuilds:
   esbuild: true