pnpm 11 (local) keeps the build-approval list in pnpm-workspace.yaml and
will regenerate the file on every 'pnpm install'. Coolify ships pnpm
9.15.9 which treats any pnpm-workspace.yaml as a monorepo descriptor and
demands a 'packages:' field — without it the build fails immediately with
'packages field missing or empty'.
So the file has to be present locally (pnpm 11 needs it) and absent in
the build context (pnpm 9 must not see it). gitignoring it satisfies both
ends. The build-approval list is also mirrored in package.json's
'pnpm.onlyBuiltDependencies' which pnpm 9 understands, so Coolify still
gets the right behaviour for sharp / unrs-resolver.