* Done! Created [`.npmrc`](file:///private/var/folders/m1/9q_ct1913z10v6wbnv54j25r0000gn/T/vibe-kanban/worktrees/vk-f75f-prevent-pa/.npmrc) with `package-lock=false` and `engine-strict=true` to prevent package-lock.json creation and enforce pnpm usage.
* remove package-lock (we use pnpm)
