chore: configure pnpm dependency build permissions

[oliverschuerch]

📄 Description

Configure explicit pnpm build permissions, allowing required native and binary builds while blocking unnecessary dependency install scripts.

Verification
pnpm install passes successfully without ignored-build errors.

---

🔮 Design review

• Design review done
• No design review needed

🧪 Visual regression tests

• Visual changes detected and approved (Check this box if VRT fails and changes are intentional)

📝 Checklist

• ✅ My code follows the style guidelines of this project
• 🛠️ I have performed a self-review of my own code
• 📄 I have made corresponding changes to the documentation
• ⚠️ My changes generate no new warnings or errors
• 🧪 I have added tests that prove my fix is effective or that my feature works
• ✔️ New and existing unit tests pass locally with my changes

[changeset-bot]

⚠️ No Changeset found

Latest commit: 937a1d5

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud