build: migrate to pnpm

Switch the package manager from npm to pnpm 11. Add packageManager,
pnpm-workspace.yaml (build allowlist + workbox public-hoist), and
mise.toml; update CI to use pnpm/action-setup and pnpm commands; remove
package-lock.json.

Two pnpm-strictness fixes were needed: an explicit "@" resolve.alias in
vite.config.ts, and publicHoistPattern for workbox so vite-plugin-pwa's
virtual register module resolves workbox-window under pnpm's non-flat
node_modules.

Assisted-by: ClaudeCode:claude-opus-4-8

Author: Flowm

.github/workflows/ci.yml

@@ -8,35 +8,39 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24
-          cache: npm
-      - run: npm ci
-      - run: npm run lint
+          cache: pnpm
+      - run: pnpm ci
+      - run: pnpm lint
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24
-          cache: npm
-      - run: npm ci
-      - run: npm test
+          cache: pnpm
+      - run: pnpm ci
+      - run: pnpm test
   deploy:
     needs: [lint, test]
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24
-          cache: npm
-      - run: npm ci
-      - run: npm run build
+          cache: pnpm
+      - run: pnpm ci
+      - run: pnpm build
       - uses: cloudflare/wrangler-action@ebbaa1584979971c8614a24965b4405ff95890e0 # v4.0.0
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          packageManager: pnpm

README.md

@@ -52,10 +52,11 @@ shows a "What we found" report of exactly which datasets were recognized.
 ## Development
 
 ```sh
-npm install
-npm run dev        # start the dev server
-npm test           # vitest unit + integration tests
-npm run build      # type-check (vue-tsc) + production build
+mise install         # provision Node 24 + pnpm 11 (see mise.toml); or bring your own
+pnpm install
+pnpm dev           # start the dev server
+pnpm test          # vitest unit + integration tests
+pnpm build         # type-check (vue-tsc) + production build
 ```
 
 Stack: Vue 3 + Vite + TypeScript, Tailwind CSS v4, Apache ECharts via vue-echarts,

mise.toml

@@ -0,0 +1,3 @@
+[tools]
+node = "24"
+pnpm = "11"