test(create-objectstack): the npm leg pins what npm ci needs, not the pnpm workspace file

Under the old npm-only stage the npm leg went red only because it also
required pnpm-workspace.yaml in the npm copy set. It now asserts the npm
lockfile is copied, the pnpm lockfile is not, and npm ci ran, so the old
stage reddens the pnpm leg alone.

Co-Authored-By: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RWZbGvPFcRKvUqASZtunCU

Author: claude

packages/create-objectstack/src/dockerfile-build-stage.test.ts

@@ -267,7 +267,8 @@ describe('scaffolded Dockerfile build stage installs from the project lockfile',
 
     const run = runInstallStep(project);
     expect(run.status, `the stage's install failed for an npm project:\n${run.output}`).toBe(0);
-    expect(run.copied).toEqual(['package-lock.json', 'package.json', 'pnpm-workspace.yaml']);
+    expect(run.copied).toEqual(expect.arrayContaining(['package-lock.json', 'package.json']));
+    expect(run.copied).not.toContain('pnpm-lock.yaml');
     expect(run.corepackCalls).toEqual([]);
     expect(installedLink(run.app), 'no install ran: node_modules/local-dep is missing').toBe(true);
   }, 30_000);