fix: move minimumReleaseAge to root level in pnpm-workspace.yaml

pnpm expects minimumReleaseAge as a root-level key, not nested under
a 'settings:' key. The previous nesting caused pnpm to silently ignore
the setting, effectively disabling the 7-day supply chain protection.

Author: cursoragent

pnpm-workspace.yaml

@@ -1,6 +1,5 @@
-settings:
-  # Wait 7 days (10080 minutes) before installing newly published packages.
-  minimumReleaseAge: 10080
+# Wait 7 days (10080 minutes) before installing newly published packages.
+minimumReleaseAge: 10080
 
 packages:
   - packages/*