chore: migrate from npm to pnpm

- Replace package-lock.json with pnpm-lock.yaml
- Set packageManager to pnpm@10.23.0
- Add minimumReleaseAge: 10080 (7 days) for supply chain protection
- Update CI workflows for pnpm

Author: erezrokah

.github/workflows/prepare.yml

@@ -20,10 +20,12 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           token: ${{ steps.app-token.outputs.token }}
+      - name: Install pnpm
+        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
       - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
         with:
           node-version: "lts/*"
-          cache: "npm"
+          cache: 'pnpm'
       - name: Install dependencies
         run: npm ci
       - uses: stefanzweifel/git-auto-commit-action@04702edda442b2e678b25b537cec683a1493fcb9 # v7

.github/workflows/test.yml

@@ -15,11 +15,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - name: Install pnpm
+        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
       - name: Use Node.js
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
         with:
           node-version: "lts/*"
-          cache: "npm"
+          cache: 'pnpm'
       - name: Install Dependencies
         run: npm ci