pnpm-workspace.yaml is the canonical location for allowBuilds in pnpm v10+, and the package.json trailing comma was cleaned up.
The "pnpm" field in package.json is no longer read by pnpm v10+, causing ERR_PNPM_IGNORED_BUILDS in CI. Moved onlyBuiltDependencies to .npmrc.