build: move pnpm minimum release age to workspace config

package.json

@@ -1249,10 +1249,6 @@
   },
   "packageManager": "pnpm@10.32.1",
   "pnpm": {
-    "minimumReleaseAge": 2880,
-    "minimumReleaseAgeExclude": [
-      "@mariozechner/*"
-    ],
     "overrides": {
       "hono": "4.12.9",
       "@hono/node-server": "1.19.10",

pnpm-workspace.yaml

@@ -4,6 +4,13 @@ packages:
   - packages/*
   - extensions/*
 
+# Delay new releases by 48h to reduce exposure to compromised packages,
+# while allowing our explicitly trusted Pi packages to update immediately.
+minimumReleaseAge: 2880
+
+minimumReleaseAgeExclude:
+  - "@mariozechner/*"
+
 onlyBuiltDependencies:
   - "@lydell/node-pty"
   - "@matrix-org/matrix-sdk-crypto-nodejs"