npm minimum release age: a cooldown for dependencies

An npm minimum release age only installs package versions that are a few days old. Set up the cooldown in npm, pnpm, Dependabot and CI step by step.