feat(turborepo-lockfiles): Update bun.lock support to match Bun's current implementation

This commit updates Turborepo's bun.lock parser to support features from Bun's latest lockfile format, addressing compatibility gaps and adding missing functionality.

## Changes

### Version Support
- Added LockfileVersion enum to properly handle v0 and v1 lockfile formats
- Implemented version validation that rejects unsupported versions
- Fixed global_change() to detect lockfile version changes (was only checking package manager changes)
- Added bun_global_change() standalone function for API consistency with other package managers

### New Lockfile Fields
- trustedDependencies: Security-related trusted package list
- overrides: Package version override mappings
- catalog/catalogs: Reusable dependency version specifications (default and named groups)
- os/cpu: Platform-specific dependency constraints (via new Negatable type)

### Feature Implementations

#### 1. Catalog Resolution
- Supports default catalog ("catalog:") and named groups ("catalog:group:")
- Integrated into resolve_package() for transparent resolution
- Properly handles missing catalogs/packages

#### 2. Override Functionality
- apply_overrides() method checks for package overrides
- Modified resolve_package() to use overrides before normal resolution
- Overrides work with patches (override version + patch = combined result)

#### 3. V1 Workspace Optimizations
- V1 lockfiles can resolve workspace dependencies directly from workspaces section
- Eliminates redundant workspace entries in packages section
- Reduces lockfile size and parsing overhead

#### 4. Platform-Specific Dependencies
- Implemented Negatable enum for os/cpu constraints
- Supports single platform, multiple platforms, and negated platforms
- Handles special "none" value for unconstrained packages

#### 5. Subgraph Filtering
- Filters overrides to only include packages in subgraph
- Filters trusted dependencies appropriately
- Preserves catalogs for potential references

## Testing
- Added 43 new tests (72 total Bun tests, up from 29)
- Comprehensive coverage of all new features
- Integration tests combining multiple features
- All existing tests continue to pass (238 total)

## Known Issues & Limitations

1. The LockfileVersion enum is defined but v1-specific behavior beyond workspace optimization may be incomplete
2. Trusted dependencies are parsed/filtered but don't affect installation behavior (may not be needed for Turborepo)
3. The libc field mentioned in Bun source is not implemented (marked TODO in Bun)
4. The Negatable::allows() method for platform matching is unused (added for completeness)
5. Some test fixtures use simplified examples that may not cover all real-world edge cases

## References
- Based on Bun's src/install/lockfile/bun.lock.zig
- Follows patterns from existing npm/pnpm/yarn implementations

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: Claude

crates/turborepo-lockfiles/fixtures/bun-catalog.lock

@@ -0,0 +1,42 @@
+{
+  "lockfileVersion": 0,
+  "workspaces": {
+    "": {
+      "name": "bun-catalog-test",
+      "devDependencies": {
+        "turbo": "^2.3.3"
+      }
+    },
+    "apps/web": {
+      "name": "web",
+      "dependencies": {
+        "react": "catalog:",
+        "lodash": "catalog:"
+      }
+    },
+    "apps/docs": {
+      "name": "docs", 
+      "dependencies": {
+        "react": "catalog:frontend",
+        "next": "catalog:frontend"
+      }
+    }
+  },
+  "packages": {
+    "turbo": ["turbo@2.3.3", "", {}, "sha512-example"],
+    "react": ["react@18.2.0", "", {}, "sha512-react"],
+    "lodash": ["lodash@4.17.21", "", {}, "sha512-lodash"],
+    "docs/react": ["react@19.0.0", "", {}, "sha512-react19"],
+    "docs/next": ["next@14.0.0", "", {}, "sha512-next14"]
+  },
+  "catalog": {
+    "react": "^18.2.0",
+    "lodash": "^4.17.21"
+  },
+  "catalogs": {
+    "frontend": {
+      "react": "^19.0.0",
+      "next": "^14.0.0"
+    }
+  }
+}

crates/turborepo-lockfiles/fixtures/bun-v1-workspace.lock

@@ -0,0 +1,49 @@
+{
+  "lockfileVersion": 1,
+  "workspaces": {
+    "": {
+      "name": "bun-v1-test",
+      "devDependencies": {
+        "turbo": "^2.3.3"
+      }
+    },
+    "apps/web": {
+      "name": "web",
+      "version": "1.0.0",
+      "dependencies": {
+        "@repo/ui": "packages/ui",
+        "react": "^18.0.0"
+      }
+    },
+    "apps/docs": {
+      "name": "docs", 
+      "version": "1.0.0",
+      "dependencies": {
+        "@repo/ui": "packages/ui",
+        "@repo/shared-utils": "packages/shared-utils"
+      }
+    },
+    "packages/ui": {
+      "name": "@repo/ui",
+      "version": "0.1.0", 
+      "dependencies": {
+        "react": "^18.0.0"
+      },
+      "devDependencies": {
+        "@repo/shared-utils": "packages/shared-utils"
+      }
+    },
+    "packages/shared-utils": {
+      "name": "@repo/shared-utils",
+      "version": "0.2.0",
+      "dependencies": {
+        "lodash": "^4.17.21"
+      }
+    }
+  },
+  "packages": {
+    "turbo": ["turbo@2.3.3", {}, "sha512-turbo"],
+    "react": ["react@18.0.0", {}, "sha512-react"],
+    "lodash": ["lodash@4.17.21", {}, "sha512-lodash"]
+  }
+}