Replace package-lock.json with pnpm-lock.yaml, add packageManager field, update package.json scripts from npm run to pnpm, and update GitHub Actions workflow to use pnpm/action-setup@v4 with frozen-lockfile installs.