Fix Docker build: move onlyBuiltDependencies to pnpm-workspace.yaml, pin pnpm@10

pnpm 10 no longer reads the "pnpm" field in package.json and treats
ignored build scripts as a hard error (ERR_PNPM_IGNORED_BUILDS), which
broke `pnpm install --frozen-lockfile` in the Docker build.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

package.json

@@ -9,8 +9,5 @@
   },
   "devDependencies": {
     "concurrently": "^8.2.2"
-  },
-  "pnpm": {
-    "onlyBuiltDependencies": ["esbuild"]
   }
 }