chore(deps): allow immediate magic tooling updates

[GSTJ]

Summary

The pnpm policy now lets first-party magic-* packages update immediately while keeping the 14-day wait for every other dependency.

Details

• Replaces four exact magic package exclusions with one magic-* rule, so later first-party releases do not need another config edit.
• Keeps minimumReleaseAge at 20,160 minutes for third-party releases.
• Keeps the dated lockfile grandfather and brace-expansion security exceptions exact to version.
• Leaves every dependency resolution unchanged.

Testing steps

1. Check out this branch.
2. Run:

pnpm install --frozen-lockfile --ignore-scripts
pnpm audit
npm audit signatures
pnpm run lint
pnpm run format
pnpm run typecheck
pnpm run test
pnpm run build
npm pack --dry-run
pnpm run changelog:check

3. Confirm the install accepts the lockfile under the supply-chain policy, the audits pass, and every remaining command exits successfully.