Add pnpm minimumReleaseAge to match dependabot cooldown

Configure pnpm to only install packages that are at least 7 days old.
This matches our dependabot configuration (default-days: 7) and provides
a stability buffer against newly published compromised packages.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Author: ntotten

pnpm-workspace.yaml

@@ -0,0 +1,4 @@
+# Require packages to be at least 7 days old before installation
+# This matches our dependabot cooldown config (default-days: 7)
+# and provides a stability buffer against compromised packages
+minimumReleaseAge: 10080