chore: use pnpmx and limit github permissions

[desoindx]

No description provided.

[Copilot]

Pull request overview

This PR enhances security and standardizes package execution by replacing npx with pnpx across build scripts and implementing the principle of least privilege in GitHub Actions workflows.

Key Changes:

• Standardized all npm package execution commands to use pnpx instead of npx for consistency with the pnpm package manager
• Added explicit read-only permissions to GitHub Actions workflows to limit access scope

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 3 comments.

File	Description
package.json	Updated build and test scripts to use pnpx instead of npx for Prisma, Playwright, and tsx execution
.github/workflows/iframes.yml	Added read-only permissions for contents and pull-requests
.github/workflows/e2e.yml	Added read-only permissions for contents and pull-requests

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

@lsagetlethias I've opened a new pull request, #825, to work on those changes. Once the pull request is ready, I'll request review from you.