fix: restore packages/web entries in bun.lock

[buremba]

PR #653's bun.lock was regenerated in a fresh worktree where the packages/web submodule wasn't initialized, so bun install pruned the packages/web importer and ~890 lines of its resolved dependency graph (Codex flagged this as P2). The root package.json still declares packages/* workspaces and packages/web is a tracked submodule, so a frozen bun install in any checkout/CI job that inits the submodule would see a workspace missing from the lockfile.

This restores bun.lock from the pre-#653 state — #653 added no new dependencies, so nothing else needs to change. Verified bun install --frozen-lockfile succeeds with the submodule initialized (1785 packages, vs the truncated 1512).

🤖 Generated with Claude Code

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!