Fix publish: drop --frozen-lockfile for first publish

Packages aren't on npm yet, so frozen lockfile fails trying to resolve
them from the registry. Use plain bun install which resolves workspace
packages locally.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: shmuel hizmi

.github/workflows/publish.yml

@@ -39,7 +39,7 @@ jobs:
           bun-version: "1.3.11"
 
       - name: Install dependencies
-        run: bun install --frozen-lockfile
+        run: bun install
 
       - name: Build
         run: bun run build