fix(nodejs): use the default ID format to match licenses in pnpm packages.

[DmitriyLewen]

Description

Fix pnpm license matching by using the correct dependency ID format.
Previously, pnpm packages were not getting their license information populated because the license matching logic was using snapshot-based IDs instead of the standard dependency ID format used by package.json analyzers.

Changes:

• Modified pkg/fanal/analyzer/language/nodejs/pnpm/pnpm.go to use dependency.ID() function to generate consistent IDs for license matching
• Added test case with PNPM v9 lockfile that includes license information to verify the fix
• License information now correctly populates for pnpm dependencies (e.g., vue-router shows "MIT" license)

Related issues

• Close bug(pnpm): Trivy doesn't detect licenses for packages when ID contains peer deps #9660

Related PRs

• fix(nodejs): use snapshot string as Package.ID for pnpm packages #9330

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)
• I've included a "before" and "after" example to the description (if the PR is a user interface change).