chore: upgrade pnpm to v11

[panz3r]

This PR primarily updates dependency versions and introduces stricter security and update policies for the project.
The changes include upgrading several key packages to their latest versions, adjusting compatibility metadata, and enhancing the security posture of dependency management.

Dependency Upgrades:

• Upgraded pnpm in package.json from version 9.13.0 to 11.8.0.
• Updated multiple dependencies in pnpm-lock.yaml, including:
  • @babel/helper-annotate-as-pure to 7.29.7 and @babel/helper-create-regexp-features-plugin to 7.29.7 [1] [2] [3] [4] [5]
  • @types/estree to 1.0.9 [1] [2] [3] [4]
  • minimatch to 10.2.5 [1] [2] [3]
  • picomatch to 2.3.2 and 4.0.4 [1] [2] [3] [4] [5] [6] [7]
  • resolve to 1.22.11 [1] [2] [3] [4]
  • serialize-javascript to 7.0.5 [1] [2] [3]

Dependency Metadata and Platform Compatibility:

• Added libc metadata to various @rollup/rollup-* packages for more precise platform targeting.

Security and Update Policy Enhancements:

• Added security settings in pnpm-workspace.yaml to:
  • Require a minimum release age of 24 hours for updates (minimumReleaseAge: 1440, minimumReleaseAgeStrict: true).
  • Block updates to packages with exotic dependencies (blockExoticSubdeps: true).
• Added a comment about preventing trust level downgrades for dependencies (commented out for now).

Workspace Configuration:

• Minor addition to the pnpm-workspace.yaml for clarity and to support the new catalog and security settings.

These changes collectively improve the project's dependency hygiene, security, and maintainability.