feat(FN-4170): align release workflow install flag and add contract tests

Updated the release workflow to align the install flag and extended the CI workflow contract test to cover the change.

Fusion-Task-Id: FN-4170

.github/workflows/release.yml

@@ -43,7 +43,7 @@ jobs:
       - name: Setup Node and install dependencies
         uses: ./.github/actions/setup-node-pnpm
         with:
-          install-args: ""
+          install-args: "--frozen-lockfile"
 
       - name: Install Bun
         uses: oven-sh/setup-bun@v2

packages/cli/src/__tests__/ci-workflow.test.ts

@@ -352,6 +352,15 @@ describe("Binary release workflow (.github/workflows/release.yml)", () => {
     expect(content).toContain("softprops/action-gh-release");
   });
 
+  it("uses frozen-lockfile install in every matrix job", () => {
+    const steps = workflow.jobs["build-binaries"].steps ?? [];
+    const compositeStep = findCompositeSetupStep(steps);
+    expect(compositeStep).toBeDefined();
+    expect(compositeStep.with?.["install-args"] ?? "--frozen-lockfile").toBe("--frozen-lockfile");
+    expect(content).not.toContain("run: pnpm install\n");
+    expect(content).not.toContain("--no-frozen-lockfile");
+  });
+
   it("references signing scripts", () => {
     expect(content).toContain("scripts/sign-macos.sh");
     expect(content).toContain("scripts/sign-windows.ps1");