Bump pnpm (from 10) to 11

[guidanoli]

📚 Context

The pnpm team have recently released pnpm 11.
It features several interesting new protections against supply-chain attacks:

• Dependency build scripts are disabled by default
• Dependencies are not bumped if they are too recent
• Subdependencies from untrusted sources can be blocked

✔️ Solution

Bump pnpm to latest 11 release. See changes.
Their migration guide might be specially useful.