chore: pnpm — the fleet has one package manager

.github/workflows/ci.yml

@@ -1,6 +1,6 @@
 name: CI
 
-# Nothing has ever run this repo's checks. `npm run verify` (typecheck + lint +
+# Nothing has ever run this repo's checks. `pnpm run verify` (typecheck + lint +
 # vitest) existed from the seed commit and was only ever run by hand, which for
 # an agent-built project means: not run. This is the gate that makes it real,
 # and it is also what lets auto-merge work at all — the sweep refuses to merge a
@@ -45,25 +45,28 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v6
+
       - name: Setup Node
         uses: actions/setup-node@v7
         with:
           node-version: 22
-          cache: npm
+          cache: pnpm
 
       - name: Install dependencies
-        run: npm ci
+        run: pnpm install --frozen-lockfile
 
-      # ONE canonical bundle — the exact `npm run verify` you run locally, so a
+      # ONE canonical bundle — the exact `pnpm run verify` you run locally, so a
       # green local verify cannot diverge from a green CI. Needs no database:
       # the unit tests are pure.
       - name: Verify (typecheck + lint + test)
-        run: npm run verify
+        run: pnpm run verify
 
       - name: Apply migrations (the build queries this DB)
-        run: npm run db:migrate
+        run: pnpm run db:migrate
 
       # Catches the class verify cannot: code that typechecks but fails to
       # compile or blows up while Next collects page data.
       - name: Build
-        run: npm run build
+        run: pnpm run build

README.md

@@ -18,11 +18,11 @@ Drop a pin on a map, add a note and a photo, and always know where a stash is.
 ```bash
 git clone <this-repo-url>
 cd HamsterCheek
-npm install
+pnpm install
 cp .env.example .env.local   # fill in DATABASE_URL
-npm run db:generate          # generate SQL migrations from src/db/schema.ts
-npm run db:migrate           # apply them
-npm run dev
+pnpm run db:generate          # generate SQL migrations from src/db/schema.ts
+pnpm run db:migrate           # apply them
+pnpm run dev
 ```
 
 Open [http://localhost:3000](http://localhost:3000).
@@ -51,7 +51,7 @@ deployment, not for anything horizontally scaled or ephemeral-filesystem hosted.
 
 ## What's next
 
-- Auth: `npm install next-auth@beta` + scope stashes to a user
+- Auth: `pnpm add next-auth@beta` + scope stashes to a user
 - Move photo storage to an object store (S3, R2) instead of local disk
 - Deploy: self-host behind a reverse proxy (build, then run `next start` on your server)