fix: reconcile bun.lock against main pins plus branch deps (frozen install passes)

Author: RhysSullivan