chore: revert accidental package-lock.json churn

The repo uses bun (per CLAUDE.md), and bun.lock already matched
package.json on main. The 5354-line diff in package-lock.json was
incidental churn from a stray `npm install` and unrelated to the
cost-tracking feature.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: wjiayis