build: move the worker from pnpm to npm

Replace pnpm-lock.yaml with package-lock.json. allowBuilds and
pnpm.onlyBuiltDependencies collapse into package.json#allowScripts, which npm
11 gates the same way; sharp is omitted because it is not in the tree.

cloudflare-worker/.github/workflows/ci.yml is updated for consistency even
though it never runs: GitHub only reads workflows from the repository root.

cloudflare-worker/.github/workflows/ci.yml

@@ -10,13 +10,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: pnpm/action-setup@v6
       - uses: actions/setup-node@v7
         with:
           node-version: '24'
-          cache: 'pnpm'
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm test
-      - run: pnpm exec wrangler deploy --dry-run
+          cache: 'npm'
+      - run: npm ci
+      - run: npm test
+      - run: npx wrangler deploy --dry-run
         env:
           CLOUDFLARE_API_TOKEN: dummy

cloudflare-worker/README.md

@@ -63,7 +63,7 @@ Each fire shows up in *History* with status code and response body — open `cla
 ```bash
 git clone https://github.com/tiennm99/claude-code-routine-trigger
 cd claude-code-routine-trigger/cloudflare-worker
-pnpm install
+npm install
 
 # Upload secrets (from Anthropic routine editor → API trigger)
 echo -n 'https://api.anthropic.com/v1/claude_code/routines/trig_.../fire' \
@@ -153,7 +153,7 @@ curl "http://localhost:8787/__scheduled?cron=*+*+*+*+*"
 ### Tests
 
 ```bash
-pnpm test
+npm test
 ```
 
 Vitest runs in the Workers runtime via `@cloudflare/vitest-pool-workers`. Tests mock `fetch`, so they consume no Anthropic quota.

cloudflare-worker/package.json

@@ -5,20 +5,20 @@
   "type": "module",
   "private": true,
   "license": "Apache-2.0",
-  "packageManager": "pnpm@11.1.1",
   "main": "worker.js",
   "scripts": {
     "dev": "wrangler dev",
     "deploy": "wrangler deploy",
     "test": "vitest run"
   },
-  "pnpm": {
-    "onlyBuiltDependencies": ["esbuild", "sharp", "workerd"]
-  },
   "devDependencies": {
     "@cloudflare/vitest-pool-workers": "^0.18.8",
     "vite": "^8.0.14",
     "vitest": "^4.1.10",
     "wrangler": "^4.114.0"
+  },
+  "allowScripts": {
+    "esbuild": true,
+    "workerd": true
   }
 }

cloudflare-worker/pnpm-workspace.yaml

@@ -1,8 +0,0 @@
-allowBuilds:
-  esbuild: true
-  sharp: true
-  workerd: true
-onlyBuiltDependencies:
-  - esbuild
-  - sharp
-  - workerd