* fix: preserve tarball dependency integrity in lockfile on v10 Backport the tarball integrity preservation and warm-store reuse fixes (pnpm/pnpm#12001, pnpm/pnpm#12067, pnpm/pnpm#12562, pnpm/pnpm#13338) to the release/10 branch so that pnpm update and warm-store lockfile re-resolution do not drop the integrity field for remote or git-hosted tarball dependencies (pnpm/pnpm#14351). * fix: verify matching tarball URL before carrying over integrity