fix: include pnpm workspace policy in release image build

[XnLemon]

Closes #18.

The Console release Docker build omitted pnpm-workspace.yaml, so pnpm 11 did not load the committed allowBuilds.esbuild policy and the release image failed at dependency installation. This copies the workspace policy into the dependency layer while keeping the allowlist scoped to esbuild.

Validation:

• corepack pnpm install --frozen-lockfile
• corepack pnpm run build
• corepack pnpm test
• Docker build attempted locally, but Docker Desktop is unavailable in this environment.

[XnLemon]

@xianingawa-wq CI is green; this is the minimal release Docker context fix for #18. Please review when available.

[XnLemon]

@xianingawa-wq Reminder: CI is green and the fix only copies the committed pnpm workspace policy into the Docker dependency layer. Please review when available.