fix: mobile CI 使用 hoisted node_modules，修复 webpack DefinePlugin 找不到

Co-authored-by: Cursor <cursoragent@cursor.com>

.drone.yml

@@ -50,6 +50,10 @@ steps:
       # 仓库内 pnpm-workspace.yaml 无 packages 字段，pnpm9 会直接失败；单包工程移走即可
       - mv pnpm-workspace.yaml pnpm-workspace.yaml.ci-bak 2>/dev/null || true
       # pnpm-lock.yaml 被 gitignore，不能 --frozen-lockfile
+      # 跳过 puppeteer 下载 Chromium（H5 构建不需要，否则会卡很久）
+      - export PUPPETEER_SKIP_DOWNLOAD=1 PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=1
+      # 无 lockfile 时 pnpm 默认隔离布局会导致 uni 找不到 webpack/lib/DefinePlugin；改用 hoisted
+      - printf '%s\n' 'shamefully-hoist=true' 'node-linker=hoisted' >> .npmrc
       - pnpm install --no-frozen-lockfile --registry https://registry.npmmirror.com
       - pnpm run build
       - test -d dist/build/h5

docs/superpowers/specs/2026-10-24-drone-tag-package-design.md

@@ -43,7 +43,8 @@
    源文件：`backend/ruoyi-admin/target/ruoyi-admin.jar` → `backend-<tag>.jar`
 
 2. **mobile**（`node:20-bookworm` + corepack/pnpm）  
-   `pnpm install --frozen-lockfile` → `pnpm run build`（即 H5）  
+   CI 先移走无效 `pnpm-workspace.yaml`，再  
+   `pnpm install --no-frozen-lockfile`（`pnpm-lock.yaml` 被 gitignore）→ `pnpm run build`（H5）  
    打包 `mobile/dist/build/h5` → `mobile-h5-<tag>.tar.gz`
 
 ## Maven 公共缓存