chore: convert to real pnpm workspace, single root lockfile

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

apps/api/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "star-auth-system",
+  "name": "api",
   "version": "1.0.0",
   "description": "STAR Phase 1 - Tier 1 Auth System with CSRF, Rate Limiting, RBAC, Google & System Auth",
   "main": "server.js",

apps/web/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "my-app",
+  "name": "web",
   "private": true,
   "version": "0.0.0",
   "type": "module",
@@ -59,7 +59,6 @@
     "@types/react-dom": "^19.2.3",
     "@vitejs/plugin-react": "^6.0.1",
     "autoprefixer": "^10.5.0",
-    "concurrently": "^9.2.1",
     "eslint": "^10.2.1",
     "eslint-plugin-react-hooks": "^7.1.1",
     "eslint-plugin-react-refresh": "^0.5.2",

package.json

@@ -0,0 +1,13 @@
+{
+  "name": "new_starr",
+  "private": true,
+  "packageManager": "pnpm@11.3.0",
+  "scripts": {
+    "dev": "concurrently -n api,web -c blue,green \"pnpm --filter api dev\" \"pnpm --filter web dev\"",
+    "build": "pnpm --filter web build",
+    "start": "pnpm --filter api start"
+  },
+  "devDependencies": {
+    "concurrently": "^9.2.1"
+  }
+}

pnpm-workspace.yaml

@@ -0,0 +1,5 @@
+packages:
+  - "apps/*"
+allowBuilds:
+  unrs-resolver: true
+  msw: true