synchronize Bun workspace lock versions during recursive releases

Problem

Recursive Bumpx releases now synchronize pantry.lock, but Bun text locks retain the prior workspace versions. Pantry v0.10.46 demonstrates the split invariant: pantry.lock is 0.10.46 while bun.lock still records 0.10.45. A cleanup commit after tagging would leave the published source tag internally inconsistent.

Scope

• Synchronize version-bearing entries under the top-level workspaces object in Bun text locks.
• Preserve dependency resolutions and unrelated content byte for byte.
• Support dry runs and rollback malformed lock data with manifest changes.
• Verify the behavior in a real Pantry patch release.

Related

• #2009
• Pantry evidence tag: https://github.com/pantry-pm/pantry/tree/v0.10.46

Implemented by 5bb0c4e and released in v0.2.10. The Bumpx v0.2.10 tag synchronizes its own Bun workspace lock, and the downstream Pantry v0.10.47 and Craft v0.0.47 tags have matching versions in both bun.lock and pantry.lock. The full Bumpx suite passed with 468 tests and 0 failures before release.