66b833b68b
The --frozen-lockfile flag requires the lockfile to be present in the checkout. Previously pnpm-lock.yaml was gitignored, so it was absent from CI checkouts. Lockfiles SHOULD be version-controlled for reproducible builds. This also enables CI to detect when lockfile is outdated vs package.json.