Update action runtime and build tooling

[Fyko]

summary

• move the javascript action runtime to node24 and point metadata at the esbuild cjs bundle
• replace ncc/npm lockfile with esbuild + pnpm 11, including deterministic license output
• update ci workflows for current checkout/setup-node/pnpm/semantic-release actions and replace the stale tagger action

verification

• npx --yes pnpm@11.5.0 install --frozen-lockfile
• npx --yes pnpm@11.5.0 run build
• node --check dist/index.cjs
• git diff --check

[github-actions]

🎉 This PR is included in version 2.0.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀