chore: update package manager to pnpm@10.33.0 in package.json

Dockerfile

@@ -1,15 +1,14 @@
 FROM node:22-alpine AS build
 WORKDIR /app
-COPY package.json package-lock.json ./
-# npm ci fails here: lockfiles written on macOS omit the @emnapi/* deps of
-# optional wasm32-wasi packages (long-standing npm bug), so use install.
-RUN npm install --no-audit --no-fund
+RUN corepack enable
+COPY package.json pnpm-lock.yaml ./
+RUN pnpm install --frozen-lockfile
 COPY . .
 # Public URL baked into canonical/OG/JSON-LD tags; pass your domain at build
 # time (or set it in .env). An empty arg must not shadow the .env value, so
 # unset it when blank — process.env beats .env files in Vite.
 ARG VITE_SITE_URL=
-RUN if [ -z "$VITE_SITE_URL" ]; then unset VITE_SITE_URL; fi && npm run build
+RUN if [ -z "$VITE_SITE_URL" ]; then unset VITE_SITE_URL; fi && pnpm build
 
 FROM nginx:alpine
 COPY nginx.conf /etc/nginx/conf.d/default.conf