- Delete package-lock.json and create .npmrc with engine-strict setting
- Generate pnpm-lock.yaml (without shamefully-hoist, works with Hardhat 3/TypeScript)
- Update package-tests.yml to use pnpm for aitbc-token package
- Validate migration: build, test (17 passing), and lint all succeed
- smart-contract-tests.yml already handles aitbc-token via pnpm from previous migration