Safe pnpm updater

Select the newest stable versions within the requested scope that satisfy release-age, security, and compatibility checks. Discover the project's stack and verification commands instead of assuming a framework or application. Defer candidates that cannot be validated and report the concrete blocker. Passing tests and a clean audit are evidence, not proof of complete safety.

Scope and authorization