chore(deps): enforce a 14-day package age

[GSTJ]

Summary

Pegada now quarantines newly published third-party packages for 14 days before pnpm can install them.

Details

• Sets the pnpm release-age floor to 20,160 minutes, matching the shared Renovate preset.
• Keeps magic-* first-party packages immediately available.
• Grandfathers only exact third-party versions already reviewed in the committed lockfile. New versions still wait 14 days.
• Renovate remains the sole dependency updater and inherits merge-after-green for eligible non-major updates from GSTJ/magic.

Testing steps

1. Install dependencies from the branch:

pnpm install --frozen-lockfile

2. Confirm the install completes successfully.
3. Run the local checks:

pnpm format && pnpm lint && pnpm typecheck && pnpm test
pnpm exec dotenv -e .env.test -- turbo build --env-mode=loose --force

4. Confirm formatting, lint, type checks, tests, and the production build complete successfully.