Add support for Bun bun.lock and bun.lockb files

[mstykow]

Support Bun package lockfiles through bun.lock and legacy bun.lockb parsing. Bun is a fast-growing JS/TS package manager, and these lockfiles would naturally extend the existing npm-family dependency parsing model.

[mstykow]

Related local tracking issue in the Rust rewrite: mstykow/provenant#333