Fixed broken pnpm/action-setup pin and excluded workspace file from zip

The pnpm/action-setup digest ac6db6d3c1f721f886538a378a2d73e85697340a no
longer exists upstream (GitHub returns HTTP 422 for it), so every workflow
job pinned to it fails to resolve the action. Replaced it with
0e279bb959325dab635dd2c09392533439d90093, the verified digest behind the
current v6/v6.0.8 tag. Discovered during the monorepo pnpm migration in
TryGhost/Themes#529.

Also excluded pnpm-workspace.yaml from the theme zip: it only carries pnpm
11 build-script approvals (development tooling) and does not belong in the
installable theme package.

Author: aileen

.github/workflows/deploy-theme.yml

@@ -19,7 +19,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: pnpm/action-setup@ac6db6d3c1f721f886538a378a2d73e85697340a
+      - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093
 
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:

.github/workflows/test.yml

@@ -16,7 +16,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: pnpm/action-setup@ac6db6d3c1f721f886538a378a2d73e85697340a
+      - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093
 
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:

gulpfile.js

@@ -73,7 +73,8 @@ function zipper(done) {
             '!node_modules', '!node_modules/**',
             '!dist', '!dist/**',
             '!pnpm-debug.log',
-            '!pnpm-lock.yaml'
+            '!pnpm-lock.yaml',
+            '!pnpm-workspace.yaml'
         ]),
         zip(filename),
         dest(targetDir)