fix(ci): install dependencies in the verify job

verify-public.mjs imports adm-zip; the verify job previously only
checked out the code.

.github/workflows/release.yml

@@ -146,10 +146,17 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
           node-version: '22'
+          cache: 'pnpm'
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
 
       - name: Download release entry
         uses: actions/download-artifact@v4