bun: support parsing bun.lockb to detect locked versions

[rarkins]

Describe the proposed change(s).

Parse barn.lockb so that each dependency's lockedVersion can be known.

This would enable more accurate detection of currentVersion, and rangeStrategy=pin, but not immediately rangeStrategy=update-lockfile

[rarkins]

Switched back to status:requirements. The challenge here is how to parse the lock file. e.g.

• "reverse engineer" the format and parse it in JS, or
• Break our rule of "no binary tools during extract process" and run bun (e.g. to convert to yarn.lock format and then parse)

Reverse engineering sounds bad but reality is that's what we do for non-binary lock file formats for every other manager.

[hyrious]

"reverse engineer" the format and parse it in JS

Just did that -- https://github.com/hyrious/bun.lockb.

It's still experimental and useless (only translates the bun.lockb to yarn lockfile v1, no reverse), let me know if you find any issues or need some features.

[rarkins]

We’ll wait for the non binary bun lock file instead: oven-sh/bun#11863