chore: move to pnpm 11

pnpm 11 replaces onlyBuiltDependencies with an explicit allowBuilds map and
fails, rather than warns, when a build script has no verdict — unrs-resolver is
eslint's native resolver and lint breaks without its postinstall.

lockfileVersion stays 9.0, so this is not a lockfile migration. Node is already
past the new >=22.13 floor. pnpm 11 also enforces a minimumReleaseAge by
default, which shapes resolution away from packages published in the last day —
a supply-chain default worth having and one that needs no configuration.

Note for the other repos: pnpm 11 stops reading the "pnpm" field in
package.json entirely. Nothing here used it, but wms keeps its overrides there.

Author: saby1101

package.json

@@ -63,7 +63,7 @@
     "typescript": "^6.0.3",
     "typescript-eslint": "^8.67.0"
   },
-  "packageManager": "pnpm@10.13.1",
+  "packageManager": "pnpm@11.21.0",
   "publishConfig": {
     "registry": "https://npm.pkg.github.com/"
   }