chore: pin pnpm via packageManager (#39)

Adds `"packageManager": "pnpm@10.28.2"` to `package.json` and drops the
redundant `version:` arg from `pnpm/action-setup` in CI.

The action now reads the version from `packageManager`, giving a single
source of truth shared between local dev and CI. Matches the convention
used in `marimo` and `marimo-lsp`.

Author: mscolnick

.github/workflows/ci.yml

@@ -17,8 +17,6 @@ jobs:
 
       - name: Install pnpm
         uses: pnpm/action-setup@903f9c1a6ebcba6cf41d87230be49611ac97822e # v6
-        with:
-          version: 10
 
       - name: Set node
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
@@ -38,8 +36,6 @@ jobs:
 
       - name: Install pnpm
         uses: pnpm/action-setup@903f9c1a6ebcba6cf41d87230be49611ac97822e # v6
-        with:
-          version: 10
 
       - name: Set node
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
@@ -59,8 +55,6 @@ jobs:
 
       - name: Install pnpm
         uses: pnpm/action-setup@903f9c1a6ebcba6cf41d87230be49611ac97822e # v6
-        with:
-          version: 10
 
       - name: Set node
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6

.github/workflows/release.yml

@@ -18,8 +18,6 @@ jobs:
 
       - name: Install pnpm
         uses: pnpm/action-setup@903f9c1a6ebcba6cf41d87230be49611ac97822e # v6
-        with:
-          version: 10
 
       - name: Set node
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6

package.json

@@ -4,6 +4,7 @@
   "description": "Teleport React components into anywhere into the react-tree.",
   "author": "marimo",
   "license": "MIT",
+  "packageManager": "pnpm@10.28.2",
   "type": "module",
   "publishConfig": {
     "access": "public"