fix: bypass stalled pnpm packaging scan

[nullxnothing]

Summary

• stage the focused runtime from a frozen, exact-version pnpm lock
• preserve nested dependency versions with a hoisted physical tree
• rebuild native addons for Electron 41 before packaging
• allow the temporary unsigned macOS release only for v4.7.7

Verification

• typecheck, full test suite, and production build pass
• 11 macOS release policy and artifact tests pass
• Windows packaged app smoke passes
• Windows packaged workbench smoke passes
• independent release review found no P0/P1 issues
• staged archive has zero missing or mismatched runtime dependencies
• staged secret scan is clean