pnpm-workspace.yaml's onlyBuiltDependencies (pnpm 10+) wasn't being read
in CI even though that's where pnpm 10 docs say it should live — the
install still bailed with ERR_PNPM_IGNORED_BUILDS. .npmrc is the long-
established, version-agnostic location pnpm honors regardless of the
installed major. Add the allowlist there.
The duplicate entries in pnpm-workspace.yaml and package.json#pnpm stay
in place — they're harmless and serve as documentation for anyone running
older pnpm.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
