Add pnpm minimumReleaseAge for dependency installation

In light of the recent npm supply chain attacks against
axios, trivy, and surely more to come: never pulling a
dependency until it's at least a day old saves us from
pulling compromised versions before they're discovered
and taken down

Author: BlythT

pnpm-workspace.yaml

@@ -4,3 +4,4 @@ onlyBuiltDependencies:
   - esbuild
   - protobufjs
   - re2
+minimumReleaseAge: 1440 # Protect against supply chain attacks by requiring dependencies to be 24h old before installation.