fix(build): constrain TypeScript compiler API

[jerome-benoit]

PR Checklist

• Title follows Conventional Commits.
• Added a build-only dependency constraint and updated the Bun lockfile.
• Existing tests pass; no product behavior changed.
• No user-facing feature documentation required.
• Addresses the build failure exposed by chore(deps): lock file maintenance #164 and the incompatibility visible in fix(deps): update dependency typescript to v7 #155.

Does this PR introduce a breaking change?

• Yes
• No

Root cause

dts-bundle-generator@9.5.1 accepts typescript >=5.0.2, but TypeScript 7 does not expose the compiler API it calls (ts.sys). A lock refresh could therefore resolve an incompatible nested TypeScript 7 package.

Changes

• override all build-tree TypeScript resolutions to 5.9.3
• record the override in build/bun.lock
• keep the existing declaration-generation toolchain unchanged

Verification

• bunx bun@1.4.0 install --frozen-lockfile
• Bun 1.4.0 browser and Bun build scripts
• deno task test: 17 passed, 250 steps, 0 failed
• deno task format:check
• deno task lint

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[jerome-benoit]

Closing as unnecessary. master passes the separated runtime and bundle CI without this override. A global exact TypeScript 5.9.3 override would create a second version source and could mask future TypeScript compatibility work, including #155. The incompatible lock refresh should remain rejected instead of pinning the whole build tree.