fix: declare sharp override in pnpm-workspace.yaml

pnpm 10 ignores package.json pnpm.overrides; keep the Trivy fix in the
workspace overrides list used by the rest of the CVE pins.

Author: ulises-jeremias

package.json

@@ -94,10 +94,5 @@
     "vite": "^8.1.4",
     "vitest": "^4.1.10"
   },
-  "packageManager": "pnpm@10.32.0+sha512.9b2634bb3fed5601c33633f2d92593f506270a3963b8c51d2b2d6a828da615ce4e9deebef9614ccebbc13ac8d3c0f9c9ccceb583c69c8578436fa477dbb20d70",
-  "pnpm": {
-    "overrides": {
-      "sharp": ">=0.35.0"
-    }
-  }
+  "packageManager": "pnpm@10.32.0+sha512.9b2634bb3fed5601c33633f2d92593f506270a3963b8c51d2b2d6a828da615ce4e9deebef9614ccebbc13ac8d3c0f9c9ccceb583c69c8578436fa477dbb20d70"
 }