[v5.x] chore(deps): harden bun install settings

[peaklabs-dev]

Harden Bun to protect against supply chain attacks (e.g. Axios compromised) and ensure reproducible installs.

Changes

• Set linker to isolated to eliminate phantom dependencies (packages accessible without being declared in package.json)
  • Explicitly install @inertiajs/core, previously resolved as a transitive dependency of @inertiajs/svelte
• Enable frozenLockfile to ensure each developer and also production Docker image builds (in the future) install the exact dependency versions from the lockfile
• Require a minimum package release age of 7 days to avoid installing freshly published or potentially hijacked packages and prevent supply chain attacks
• Disable telemetry
• Disable automatic .env file loading

TODO

• Possibly remove frozenLockfile, as it seems broken - it also prevents the installation of new packages (bun add) because it runs all the time, not only during a bun install?