RTECO-1055 - Treat pnpm workspace as standalone

[fluxxBot]

• All tests passed. If this feature is not already covered by the tests, I added new tests.
• All static analysis checks passed.
• Appropriate label is added to auto generate release notes.
• I used gofmt for formatting the code before submitting the pull request.
• PR description is clear and concise, and it includes the proposed solution/fix.

---

Problem

jf pnpm install unconditionally ran pnpm ls -r --depth Infinity --json when collecting build-info. This ignored the user's workspace intent in two scenarios:

1. Sub-package invocation — cd apps/web-app && jf pnpm install produced a multi-module build-info containing every workspace package, not just web-app.
2. --ignore-workspace flag — pnpm install --ignore-workspace was honored by pnpm during install, but the subsequent pnpm ls -r re-enumerated the entire monorepo, leaking sibling/root deps into the build-info.

Downstream SBOM / Xray consumers therefore saw phantom dependencies that didn't actually belong to the built package.

Fix

The build-info pnpm ls call now matches the user's intent:

• isPnpmWorkspaceSubPackage — uses pnpm root -w plus symlink-resolved path compare. When the working directory is a workspace sub-package, -r is dropped and only the current package's deps are collected.
• extractLsForwardFlags — forwards --ignore-workspace from the install args to pnpm ls, so build-info respects the flag.
• buildPnpmLsArgs — also drops -r when --ignore-workspace is forwarded (pnpm would otherwise emit concatenated JSON arrays that aren't parseable by encoding/json).

Workspace-root invocation without --ignore-workspace keeps the existing -r multi-module behavior — no regression for current CI flows.

Tests

• Unit tests for extractLsForwardFlags, buildPnpmLsArgs (all branches), samePath, isPnpmWorkspaceSubPackage.
• Companion E2E tests in jfrog-cli (linked PR) — verified end-to-end against a real Artifactory instance.

depends on:

1. RTECO-1055 - Treat pnpm workspace as standalone jfrog-cli#3451