fix(deepflow-frontend): pin pnpm@10.6.5 to match packageManager field

'npm install -g pnpm' pulled pnpm 11.x, whose engine-identity
verification fails against the 10.6.5 lockfile (ERR_PNPM_PNPM_ENGINE_IDENTITY_UNVERIFIABLE).
Pin the exact version in both deps and builder stages, and use
--frozen-lockfile for the install.

scripts/images/deepflow-frontend/Dockerfile

@@ -12,9 +12,11 @@ WORKDIR /app
 COPY deepflow/web/ ./
 
 # Install dependencies based on the preferred package manager
+# pnpm 版本必须与 package.json 的 packageManager (pnpm@10.6.5) 一致，
+# 否则 pnpm >=10.13 的 engine identity 校验会报 ERR_PNPM_PNPM_ENGINE_IDENTITY_UNVERIFIABLE
 RUN if [ -f yarn.lock ]; then yarn --frozen-lockfile; \
     elif [ -f package-lock.json ]; then npm ci; \
-    elif [ -f pnpm-lock.yaml ]; then npm install -g pnpm && pnpm i; \
+    elif [ -f pnpm-lock.yaml ]; then npm install -g pnpm@10.6.5 && pnpm i --frozen-lockfile; \
     else echo "Lockfile not found." && exit 1; \
     fi
 
@@ -40,7 +42,7 @@ ENV NEXT_TELEMETRY_DISABLED=1
 
 RUN if [ -f yarn.lock ]; then SKIP_ENV_VALIDATION=1 yarn build; \
     elif [ -f package-lock.json ]; then SKIP_ENV_VALIDATION=1 npm run build; \
-    elif [ -f pnpm-lock.yaml ]; then npm install -g pnpm && SKIP_ENV_VALIDATION=1 pnpm run build; \
+    elif [ -f pnpm-lock.yaml ]; then npm install -g pnpm@10.6.5 && SKIP_ENV_VALIDATION=1 pnpm run build; \
     else echo "Lockfile not found." && exit 1; \
     fi