Chore: resolve npm provenance issues with chokidar and semver (#13323)

src-ui/pnpm-workspace.yaml

@@ -2,6 +2,9 @@ packages:
   - "."
 minimumReleaseAge: 10080
 trustPolicy: no-downgrade
+trustPolicyExclude:
+  - "chokidar@4.0.3"
+  - "semver@6.3.1 || 5.7.2"
 allowBuilds:
   "@parcel/watcher": true
   canvas: true