fix: align Dockerfile pnpm version to 11.4.0 and copy workspace config

Two issues caused Docker build failures:
1. Dockerfile still used pnpm@10.28.0 while packageManager specifies 11.4.0,
   causing corepack to download 11.4.0 which has strict build script approval
2. pnpm-workspace.yaml (which sets allowBuilds.tesseract.js: false) was not
   copied before pnpm install, so pnpm could not read the build approval config

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: chaxus

Dockerfile

@@ -4,11 +4,11 @@ WORKDIR /app
 
 # Enable Corepack and install pnpm (Corepack reads packageManager from package.json)
 RUN corepack enable && \
-    corepack prepare pnpm@10.28.0 --activate && \
+    corepack prepare pnpm@11.4.0 --activate && \
     pnpm --version
 
 # Copy package files
-COPY package.json pnpm-lock.yaml ./
+COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
 
 # Install dependencies
 RUN pnpm install --frozen-lockfile