Replace package-lock.json with pnpm-lock.yaml, add packageManager field, and update GitHub Actions workflow to use pnpm/action-setup@v4 with frozen-lockfile installs.