chore: track bun.lock in version control (#21)

bun.lock was gitignored, so the SDK bump in #20 only updated
package-lock.json. Track bun.lock so bun users get the pinned
dependency tree too.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: DhruvBhatia0

.gitignore

@@ -16,8 +16,7 @@ logs/
 .vscode/
 .idea/
 
-# Lockfiles (bun/pnpm — npm uses package-lock.json)
-bun.lock
+# Lockfiles (pnpm — npm uses package-lock.json, bun uses bun.lock)
 pnpm-lock.yaml
 
 # ADV plugin state