Set CI for one-shot pnpm compose services

[uF4No]

Summary

• set CI=true for the compose services that run pnpm install without a TTY
• cover bridge-funds, sso-contracts-deployer, and sso-permissions-setup
• avoid ERR_PNPM_ABORTED_REMOVE_MODULES_DIR_NO_TTY when mounted node_modules needs to be recreated

Context

Running docker compose up -d through the demo repo's pnpm local-prividium:start hits sso-contracts-deployer first. That service runs pnpm install in a non-interactive container with a mounted node_modules volume, so pnpm may need to purge and recreate the directory. Without CI=true, pnpm aborts instead of proceeding.

Verification

• reproduced the original failure in sso-contracts-deployer with ERR_PNPM_ABORTED_REMOVE_MODULES_DIR_NO_TTY
• reran after this change and confirmed the service moved past pnpm install into the TypeScript deployment script