Bun dependency fixture

Controlled Bun workspace used by Bomly's end-to-end detector tests. Dependency versions are intentionally pinned so graph and output assertions remain reproducible.