test-spring-security-fusion is the only IT module which has pnpm-lock.yaml and package.json.
The files are auto-regenerated and there is no point to have them in the VCS.
They add extra complexity during development because they cause merge conflicts.
They should be removed.