fix: Restore repository CI

[ayim]

What changed

• Regenerated bun.lock with the CI-pinned Bun 1.3.10 so frozen installs include the demo server and storefront workspaces and current workspace versions.
• Limited CLA, Vercel dashboard previews, and write-enabled docs automation to vendurehq/vendure, where their required upstream credentials are configured.
• Kept normal build, test, and read-only docs validation active in this repository.

Root cause

Every build-related PR check failed during setup because bun install --frozen-lockfile detected changes in the committed lockfile. Separately, CLA Assistant failed before its main step because this mirror does not have the upstream CI Bot App credentials. Secret-dependent preview and docs jobs would have failed for the same repository-configuration reason after dependency setup was repaired.

Impact

PRs in ayim/vendure now exercise legitimate build and test workflows without unrelated upstream deployment or credential failures.

Validation

• bun install --frozen-lockfile --ignore-scripts with Bun 1.3.10: passed with 4,047 installs across 3,261 packages and no changes.
• Full forced install with Bun 1.3.10 and Node 22.23.1: passed (2,963 packages installed).
• All edited workflow YAML files parsed successfully.
• git diff --check: passed.
• Full monorepo build completed the core, dashboard, GraphiQL, and most package builds; the legacy admin-ui-plugin build exited without diagnostics on local macOS.