fix(runner-e2e): freeze Daytona plugin dependencies

.github/workflows/runner-full-stack-e2e.yml

@@ -781,11 +781,12 @@ jobs:
           test -d "$sdk_root"
           test ! -L "$daytona_root"
           test ! -L "$sdk_root"
+          test -f "$daytona_root/pnpm-lock.yaml"
           test "$(jq -r .name "$daytona_root/package.json")" = "@paperclipai/plugin-daytona"
           test "$(jq -r .name "$sdk_root/package.json")" = "@paperclipai/plugin-sdk"
           (
             cd "$daytona_root"
-            pnpm install --ignore-workspace --no-lockfile --ignore-scripts
+            pnpm install --ignore-workspace --frozen-lockfile --ignore-scripts
           )
           node scripts/link-plugin-dev-sdk.mjs
           test "$(realpath "$daytona_root/node_modules/@paperclipai/plugin-sdk")" = "$(realpath "$sdk_root")"

tests/runner-e2e/workflow-security.test.ts

@@ -140,8 +140,12 @@ describe("public repository paid workflow security", () => {
       "if: matrix.environmentId == 'daytona'",
     );
     expect(preparedBeforeProviderAccess).toContain(
-      "pnpm install --ignore-workspace --no-lockfile --ignore-scripts",
+      'test -f "$daytona_root/pnpm-lock.yaml"',
     );
+    expect(preparedBeforeProviderAccess).toContain(
+      "pnpm install --ignore-workspace --frozen-lockfile --ignore-scripts",
+    );
+    expect(preparedBeforeProviderAccess).not.toContain("--no-lockfile");
     expect(preparedBeforeProviderAccess).toContain(
       "node scripts/link-plugin-dev-sdk.mjs",
     );