chore: update pnpm to 10.21 and enable trust policy

Author: danielroe

.github/workflows/provenance.yml

@@ -15,3 +15,5 @@ ignoredBuiltDependencies:
   - oxc-resolver
   - unrs-resolver
   - vue-demi
+trustPolicy: no-downgrade
+