rules_js v3 BREAKING CHANGES

[jbedard]

BREAKING CHANGES for next major release of rules_js:

• remove pnpm lockfile version 5 (maybe 6, 6.1)
• remove use of pnpm lockfile optional, requiresBuild
• switch default pnpm to v9 (chore: upgrade default pnpm to v9 #2220)
• remove bazel v6 support
• remove rules_nodejs v5 support (see: hasattr(nodeinfo, "node") calls, ...)
• remove node <X support (see use of abortcontroller-polyfill etc)
• remove exclude_types_from_npm_packages_flag
• resolve TODO(3.0) comments
• feat: add default npm package excludes from yarn #2136
• remove npm_import/npm_package_store(dev), see [Bug]: dev = True support missing from pnpm version 9 lockfiles #2013
• replace npm_translate_lock(dev/prod) with single "no dev" flag, see [Bug]: dev = True support missing from pnpm version 9 lockfiles #2013
• Remove ability to customize virtual store name #2196

MAYBE:

• simplify internal package store rules and make circular-dep handling opt-in?
• split npm_link_all_packages store vs link targets into different marcos: store targets (root only), :node_modules/{pkg} targets within each package directory such as @npm//my/project:defs.bzl

LARGE (but should be non-breaking):

• [FR]: provide select constraints for optional dependencies that define specific platforms #714
• refactor: align pnpm package store with lockfile #2177 (partially breaking)