chore(deps): enforce a 14-day release age

[GSTJ]

Summary

Dependency installs now hold new package versions for 14 days before accepting them.

Details

• Sets pnpm's release-age policy to 20,160 minutes.
• Keeps the already-reviewed lockfile installable with exact version exceptions. Any later version still waits.
• Continues to inherit dependency updates from github>GSTJ/magic; there is no Dependabot version-update config in this repo.

Testing steps

1. Check out this branch.
2. Run:

pnpm install --frozen-lockfile
pnpm run lint
pnpm run format
pnpm run typecheck
pnpm run test
pnpm run build
npm pack --dry-run
pnpm run changelog:check

3. Confirm installation accepts the lockfile under the supply-chain policy and every command exits successfully.