fix: Allow pnpm to regenerate lockfile for dependabot

[lornakelly]

Description

Dependabot PRs open but cannot be merged due to the lockfile being out of sync. See the following error

Run pnpm install
Scope: all 3 workspace projects
 ERR_PNPM_OUTDATED_LOCKFILE  Cannot install with "frozen-lockfile" because pnpm-lock.yaml is not up to date with <ROOT>\package.json

Note that in CI environments this setting is true by default. If you still need to run install in such cases, use "pnpm install --no-frozen-lockfile"

  Failure reason:
  specifiers in the lockfile don't match specifiers in package.json:
* 1 dependencies are mismatched:
  - lint-staged (lockfile: 17.0.2, manifest: catalog:)

PR reference #137

Fix

Conditionally append --no-frozen-locakfile when github.event.pull_request_user.login is dependabot. Once merged, close the current dependabot PR and allow it to recreate

[Copilot]

Pull request overview

Updates CI dependency installation behavior to avoid Dependabot PRs failing due to pnpm-lock.yaml being out of sync with package.json when frozen-lockfile is implicitly enabled in CI.

Changes:

• Conditionally adds --no-frozen-lockfile to pnpm install when the workflow run is attributed to dependabot[bot].

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.

[lornakelly]

@ricardozanini if you can merge when you get a chance please