chore(deps): enforce a 14-day package quarantine

[GSTJ]

Summary

Dependency installs now hold newly published package versions for 14 days before accepting them.

Details

• Sets pnpm's install-time release age to 20,160 minutes for direct and transitive dependencies.
• Grandfathers the 28 exact versions already locked on master on 2026-08-04. Future versions still wait.
• Continues to get dependency updates from github>GSTJ/magic; this repo has no Dependabot version-update config.

Testing steps

1. Check out this branch.
2. Run:

corepack pnpm install --frozen-lockfile
corepack pnpm run build
corepack pnpm run lint
corepack pnpm run format
corepack pnpm run typecheck
corepack pnpm test
corepack pnpm run changelog:check

3. Confirm the install reports that the lockfile passes the supply-chain policy and every command exits successfully.