CI: Use minimumReleaseAge in pnpm workspace files (#92480)
Depends on pnpm 10.x: https://github.com/vercel/next.js/pull/92283
Enables https://pnpm.io/settings#minimumreleaseage to protect against supply-chain attacks.
The `minimumReleaseAgeExclude` list is copied from https://github.com/vercel/front/blob/1c3a9458d970265e1fb5ec14ddfed9a0eab2abef/pnpm-workspace.yaml#L13, with `react` and `react-dom` added.
