better detection of package manager

[milahu]

currently we go by presence of lockfiles

better: (also) go by structure of node_modules

example: if the node_modules/.pnpm folder is present then use pnpm