ci: approve build scripts for pnpm v11

pnpm v11 errors out on unapproved install scripts. Add explicit
onlyBuiltDependencies allowlist for native binaries and engines, and
ignoredBuiltDependencies for noise (postinstall ads, unused gatsby).

Author: segunadebayo

package.json

@@ -79,6 +79,26 @@
     "overrides": {
       "@swc/helpers@~0.4": "0.4.36",
       "picomatch@4.0.3": "4.0.4"
-    }
+    },
+    "onlyBuiltDependencies": [
+      "@parcel/watcher",
+      "@prisma/client",
+      "@prisma/engines",
+      "@swc/core",
+      "esbuild",
+      "lmdb",
+      "msgpackr-extract",
+      "prisma",
+      "sharp",
+      "svelte-preprocess",
+      "unrs-resolver"
+    ],
+    "ignoredBuiltDependencies": [
+      "core-js",
+      "core-js-pure",
+      "es5-ext",
+      "gatsby",
+      "gatsby-cli"
+    ]
   }
 }