Migrate to .pnpmrc configuration

- Remove .npmrc in favor of .pnpmrc for pnpm-specific settings
- Add ignore-scripts and enable-pre-post-scripts to .pnpmrc
- Add engines.pnpm requirement (>=10.16.0) to package.json

Cross-platform compatibility: Using .env files with dotenvx ensures
consistent behavior on Windows where inline env vars don't work.

Author: jdalton

.npmrc

@@ -1,11 +1,11 @@
-# Delayed dependency updates - wait 7 days (10080 minutes) before allowing new packages.
-minimumReleaseAge=10080
+# Security: Block all install scripts (no native dependencies)
+ignore-scripts=true
 
-# Auto-install peers.
-auto-install-peers=true
+# Enable pre/post scripts for the main project (e.g., prepare -> husky)
+enable-pre-post-scripts=true
 
-# Strict peer dependencies.
+# Dependency management
+minimumReleaseAge=10080
+auto-install-peers=true
 strict-peer-dependencies=false
-
-# Save exact versions (like npm --save-exact).
 save-exact=true

.pnpmrc

@@ -107,7 +107,8 @@
     "yoctocolors-cjs": "2.1.3"
   },
   "engines": {
-    "node": ">=18"
+    "node": ">=18",
+    "pnpm": ">=10.16.0"
   },
   "files": [
     "dist/**/*",