fix(triage-flow): restore platform-specific optional bindings in package-lock

When `npm install` was run on the previous Linux dev environment to add
the sandcastle and @effect/* peers, npm 11 stripped 34 of the 38
@oxfmt/binding-* and @oxlint/binding-* entries from the lock file
because their declared cpu/os didn't match the local platform. The
macOS quality-gates job then ran `aube ci` (frozen lockfile) on
darwin-arm64 and could not load oxfmt/oxlint, failing format-check
with `Cannot find module '@oxfmt/binding-darwin-arm64'`.

Restore origin/main's lockfile (38 platform bindings) and re-run
`npm install --package-lock-only` to add only the new @effect/*,
@ai-hero/sandcastle, and friends entries without pruning the
platform bindings. Verified locally with `aube ci`, typecheck,
lint, format:check.

Author: ThomasK33