chore: bump pnpm to 11.1.2

- Update packageManager to pnpm@11.1.2 and the nix flake to pnpm_11
  (bumps nixpkgs to a commit that ships pnpm 11).
- Move pnpm settings out of .npmrc and package.json into pnpm-workspace.yaml:
  nodeLinker (was .npmrc/node-linker) and allowBuilds (replaces the removed
  pnpm.onlyBuiltDependencies key).

.npmrc

@@ -1,2 +1 @@
 tag-version-prefix=""
-node-linker=hoisted

flake.lock

@@ -20,11 +20,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1768564909,
-        "narHash": "sha256-Kell/SpJYVkHWMvnhqJz/8DqQg2b6PguxVWOuadbHCc=",
+        "lastModified": 1779508470,
+        "narHash": "sha256-Ap9KJX+5xHIn3bPIpfNgT6MEXdAECECwo4/rmlQD74M=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "e4bae1bd10c9c57b2cf517953ab70060a828ee6f",
+        "rev": "29916453413845e54a65b8a1cf996842300cd299",
         "type": "github"
       },
       "original": {

flake.nix

@@ -16,7 +16,7 @@
           buildInputs = with pkgs; [
             # Node.js and package manager
             nodejs_24
-            pnpm_10
+            pnpm_11
 
             # Development tools
             just

package.json

@@ -57,11 +57,5 @@
 		"typescript": "^6.0.3",
 		"typescript-eslint": "^8.59.4"
 	},
-	"packageManager": "pnpm@10.33.4",
-	"pnpm": {
-		"onlyBuiltDependencies": [
-			"esbuild",
-			"unrs-resolver"
-		]
-	}
+	"packageManager": "pnpm@11.1.2"
 }

pnpm-workspace.yaml

@@ -0,0 +1,4 @@
+nodeLinker: hoisted
+allowBuilds:
+  esbuild: true
+  unrs-resolver: true