chore: cleanups

[wthrajat]

• Switch to using pnpm in github workflow and Dockerfile
• After this we don't need package-lock.json since pnpm-lock.yaml replaces it
• updated github actions versions
• server libs are 95% latest now
• havent touched client libs (like react and derivatives)
• many dependencies were breaking after bumping: so they are are reverted and untouched now
• sort package.json
• App runs