fix(video-renderer): regenerate pnpm-lock.yaml for the producer pin

The 0.7.36 exact-pin landed via an npm install, which wrote a stray
package-lock.json and left pnpm-lock.yaml stale — the image build's
pnpm install --frozen-lockfile then correctly refused the spec
mismatch, blocking deploys. Lockfile regenerated with the Dockerfile's
own pinned pnpm@11.10.0 (resolves @hyperframes/producer@0.7.36 exactly,
frozen-lockfile install and the sidecar's node --test 15/15 verified
locally); the npm lockfile is removed — this package is pnpm-managed.

video-renderer/pnpm-lock.yaml

@@ -12,7 +12,7 @@ importers:
         specifier: ^0.7.36
         version: 0.7.36
       '@hyperframes/producer':
-        specifier: ^0.7.36
+        specifier: 0.7.36
         version: 0.7.36
       express:
         specifier: ^5.0.0