chore: upgrade astro stack and lock dependency policy (#37)

### Explanation

Updating astro so to surpass vite versions that file trust policy check

### Issue

_No response_

### Attestations

- [x] I have read and agree to the [Code of Conduct](https://docs.nhcarrigan.com/community/coc/)
- [x] I have read and agree to the [Community Guidelines](https://docs.nhcarrigan.com/community/guide/).
- [x] My contribution complies with the [Contributor Covenant](https://docs.nhcarrigan.com/dev/covenant/).

### Dependencies

- [x] I have pinned the dependencies to a specific patch version.

### Style

- [x] I have run the linter and resolved any errors.
- [x] My pull request uses an appropriate title, matching the conventional commit standards.
- [x] My scope of feat/fix/chore/etc. correctly matches the nature of changes in my pull request.

### Tests

- [ ] My contribution adds new code, and I have added tests to cover it.
- [ ] My contribution modifies existing code, and I have updated the tests to reflect these changes.
- [x] All new and existing tests pass locally with my changes. *
- [ ] Code coverage remains at or above the configured threshold.

* a test fail for missing docs for a new app, unrelated to the changes

### Documentation

_No response_

### Versioning

Patch - My pull request introduces bug fixes ONLY.

Reviewed-on: #37
Reviewed-by: Naomi Carrigan <accounts@nhcarrigan.com>
Co-authored-by: Ilenia <ilenia@nhcarrigan.com>
Co-committed-by: Ilenia <ilenia@nhcarrigan.com>

pnpm-workspace.yaml

@@ -14,8 +14,18 @@ trustPolicyIgnoreAfter: 525960
 strictPeerDependencies: true
 # Prevent transitive dependencies from using exotic sources (git repos, direct tarball URLs)
 blockExoticSubdeps: true
+overrides:
+  nanoid: 3.3.11
+packageExtensions:
+  langium@*:
+    dependencies:
+      vscode-jsonrpc: 8.2.1
 
 # Lockfile
 
 # Allow the lockfile to be updated during install (set to true in CI for stricter reproducibility)
 preferFrozenLockfile: false
+
+allowBuilds:
+  esbuild: false
+  sharp: false