fix: pnpm-lock sync, per-group build-script allowlist, ppnpm typos

- Regenerate pnpm-lock.yaml to match v2 package.json (Baileys 6.17.16,
  @chat-adapter/linear 4.26.0)
- src/container-runner.ts: when install_packages rebuilds a per-group
  image, append each installed package to /root/.npmrc's
  only-built-dependencies before pnpm install -g, so packages with
  postinstall scripts (playwright, puppeteer, native addons) don't
  install silently broken
- Fix stray 'ppnpm uninstall' in 13 skill files (REMOVE.md + SKILL.md)
  left over from the npm→pnpm sed pass

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

.claude/skills/add-github-v2/REMOVE.md

@@ -2,5 +2,5 @@
 
 1. Comment out `import './github.js'` in `src/channels/index.ts`
 2. Remove `GITHUB_TOKEN` and `GITHUB_WEBHOOK_SECRET` from `.env`
-3. `ppnpm uninstall @chat-adapter/github`
+3. `pnpm uninstall @chat-adapter/github`
 4. Rebuild and restart