fix: pnpm-lock sync, per-group build-script allowlist, ppnpm typos

- Regenerate pnpm-lock.yaml to match v2 package.json (Baileys 6.17.16,
  @chat-adapter/linear 4.26.0)
- src/container-runner.ts: when install_packages rebuilds a per-group
  image, append each installed package to /root/.npmrc's
  only-built-dependencies before pnpm install -g, so packages with
  postinstall scripts (playwright, puppeteer, native addons) don't
  install silently broken
- Fix stray 'ppnpm uninstall' in 13 skill files (REMOVE.md + SKILL.md)
  left over from the npm→pnpm sed pass

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

pnpm-lock.yaml

@@ -24,7 +24,7 @@ importers:
         specifier: ^4.24.0
         version: 4.26.0
       '@chat-adapter/linear':
-        specifier: ^4.24.0
+        specifier: ^4.26.0
         version: 4.26.0(graphql@16.13.2)
       '@chat-adapter/slack':
         specifier: ^4.24.0
@@ -51,7 +51,7 @@ importers:
         specifier: ^1.5.6
         version: 1.5.6
       '@whiskeysockets/baileys':
-        specifier: ^6.7.21
+        specifier: ^6.17.16
         version: 6.17.16(eslint@9.39.4)(typescript@5.9.3)
       better-sqlite3:
         specifier: 11.10.0