df72fd9439
pnpm defaults to frozen-lockfile in CI. The committed lockfile is outdated (vitest added to package.json). Using --no-frozen-lockfile is a pragmatic fix; lockfile should be regenerated via 'pnpm install' and recommitted for full --frozen-lockfile enforcement.