Fix Makefile targets, use frozen lockfile in CI

- Add bun install recipe to node_modules target (was missing)
- Use bun install --frozen-lockfile in all CI workflows
- Don't delete committed bun.lock in make clean

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: 2 people

.github/workflows/lint-and-typecheck.yml

@@ -17,7 +17,7 @@ jobs:
         uses: oven-sh/setup-bun@v2
 
       - name: Install dependencies
-        run: bun install
+        run: bun install --frozen-lockfile
 
       - name: Check Prettier
         run: make format

.github/workflows/main-build.yml

@@ -23,7 +23,7 @@ jobs:
         uses: oven-sh/setup-bun@v2
 
       - name: Install dependencies
-        run: bun install
+        run: bun install --frozen-lockfile
 
       - name: Run Build
         run: make

.github/workflows/publish-check.yml

@@ -23,7 +23,7 @@ jobs:
           node-version: 24.x
 
       - name: Install dependencies
-        run: bun install
+        run: bun install --frozen-lockfile
 
       - name: Build all packages
         run: make

.github/workflows/test-headless.yml

@@ -22,7 +22,7 @@ jobs:
         uses: oven-sh/setup-bun@v2
 
       - name: Install dependencies
-        run: bun install
+        run: bun install --frozen-lockfile
 
       - name: Run Build
         run: make

Makefile

@@ -13,9 +13,10 @@ default: all
 
 package.json:
 
-node_modules: bun.lock
+node_modules: package.json bun.lock packages/*/package.json
+	bun install
 
-all:: node_modules bun.lock
+all:: node_modules
 	$(LERNA) --concurrency $(CONCURRENCY) exec --stream -- $(MAKE)
 
 test test-headless:
@@ -83,7 +84,6 @@ sweep:
 
 clean: sweep
 	rm -rf node_modules/
-	rm -f bun.lock
 
 
 # Local linking of these packages, so they