Switch to pnpm

[logbasem]

          Any reason we're not using `pnpm`? `npm` is always unusable on bad connections 😭

Originally posted by @onkoe in #13 (comment)