Merge pull request #4679 from vikyw89/harden/minimum-release-age

chore: enforce 3-day minimum release age for dependencies (supply-chain hardening)

pnpm-workspace.yaml

@@ -4,4 +4,8 @@ packages:
   - "apps/schedules"
   - "packages/server"
 
+# Supply-chain hardening: refuse package versions younger than 3 days (4320 min),
+# so newly-published malicious versions get caught/yanked before we install them.
+minimumReleaseAge: 4320
+