Stabilize web CI dependency installation - #974

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

Up to standards ✅

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

Greptile Summary

The PR stabilizes web validation and deployment installs by passing --trust-lockfile to pnpm 11.11.0.

• Applies the option consistently to both web dependency-installation steps.
• Preserves lockfile integrity verification and package build restrictions while skipping release-age policy rechecks.

Confidence Score: 5/5

The PR appears safe to merge with no actionable failures identified.

Both workflow jobs use a pnpm version that supports the new option, and the change consistently implements the explicitly intended lockfile-trust behavior without disabling integrity verification or package build restrictions.

Important Files Changed

_{Reviews (1): Last reviewed commit: "ci(web): trust committed pnpm lockfile" | Re-trigger Greptile}