A lockfile bump should re-key two tasks, not sixty
Every monorepo tool folds the lockfile into every key, so pnpm update invalidates the world. @vzn/vx-lockfile parses the lockfile and keys each task on its own project's dependency closure. In vx's own repo that turned 59 re-keyed tasks into 2.