fix: support negated pnpm os|cpu constraints (#2696)

Fix #2694

PNPM os/cpu constraints can also be negated such as `!arm`, for example:

```
  [email protected]:
    resolution: {integrity: sha512-...==}
    cpu: ['!arm', '!arm64', '!riscv64', '!x64']
```

See:
https://docs.npmjs.com/cli/v10/configuring-npm/package-json#cpu
https://nodejs.org/docs/latest-v24.x/api/process.html#processarch
https://nodejs.org/docs/latest-v24.x/api/process.html#processplatform

### Changes are visible to end-users: no

### Test plan

- New test cases added

Author: jbedard

e2e/pnpm_lockfiles/MODULE.bazel

@@ -97,6 +97,7 @@ npm = use_extension(
 
         # optional deps, os/cpu conditions
         "lock-%s__esbuild__0.27.0__links" % version,
+        "lock-%s__sass-embedded__1.97.3__links" % version,
     )
     for version in PNPM_LOCK_VERSIONS
 ]

e2e/pnpm_lockfiles/base/package.json

@@ -49,7 +49,8 @@
         "@types/node": "22.18.13",
         "@types/archiver": "5.3.1",
         "alias-only-sizzle": "npm:@types/sizzle@~2.3.10",
-        "alias-types-node": "npm:@types/node@~22.18.13"
+        "alias-types-node": "npm:@types/node@~22.18.13",
+        "sass-embedded": "1.97.3"
     },
     "optionalDependencies": {
         "@aspect-test/c": "2.0.0",

e2e/pnpm_lockfiles/lockfile-test.bzl

@@ -31,6 +31,7 @@ BZLMOD_FILES = {
 
     # optional deps, os/cpu conditions
     "esbuild_links_defs.bzl": "@REPO_NAME__esbuild__0.27.0__links//:defs.bzl",
+    "sass-embedded_links_defs.bzl": "@REPO_NAME__sass-embedded__1.97.3__links//:defs.bzl",
 }
 
 def lockfile_test(npm_link_all_packages, name = None):
@@ -113,6 +114,9 @@ def lockfile_test(npm_link_all_packages, name = None):
             # rollup has a 'optionalDependency' (fsevents)
             ":node_modules/rollup",
 
+            # sass-embedded has many optional deps with conditions
+            ":node_modules/sass-embedded",
+
             # npm: alias to a package that has many peers
             ":node_modules/rollup-plugin-with-peers",
             # underlying repo for the many-peers package