Chore: add Bun minimum release age

[vincentmvdm]

Tip

🎬 Watch the walkthrough: Add Bun minimum release age policy to bunfig.toml

^{Generated by Mainframe. Mainframe automatically generates videos when new pull requests are opened. Configure here.}

---

Summary

• Add a root bunfig.toml install policy requiring npm package versions to be at least 604800 seconds (seven days) old before Bun resolves them.
• Protect future bun install/add/update resolution in the plugin repo from freshly published supply-chain attacks.

Tests

• npm exec --yes --package bun@1.3.1 -- bun ci
• npm exec --yes --package bun@1.3.1 -- bun run verify

---

Note

Low Risk
Single config-only change to dependency resolution timing; no application logic or security-sensitive runtime behavior.

Overview
Adds a root bunfig.toml install policy so Bun only resolves npm package versions that are at least 604800 seconds (7 days) old.

This applies to future bun install / add / update resolution in the repo and is meant to reduce exposure to freshly published supply-chain packages; CI already runs bun ci on Bun 1.3.1 and will pick up the config automatically.

^{Reviewed by Cursor Bugbot for commit eb7dbd6. Bugbot is set up for automated code reviews on this repo. Configure here.}

[vincentmvdm]

@cursor review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

1 issue from previous review remains unresolved.

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit eb7dbd6. Configure here.}