V3 Bun JavaScript/TypeScript toolchain capability pack. By-value connector composition (service_kind=cli, no separate ingredient): one local bun CLI ingredient exposes bounded project operations for readiness, lockfile freshness checks, installed dependency inspection, dependency vulnerability audit, package publish dry-run inspection, and targeted Bun test execution. Project operations run from an explicit project directory cwd supplied at execution time through the native cli_invocation cwd field, avoid caller-supplied bun flags, avoid shell wrappers, and keep diagnostics visible as text or JSON output. Lock checks use frozen-lockfile dry-run mode and skip lifecycle scripts. Dependency audit is approval-gated because installed package names and versions are sent to npm. Test execution is approval-gated because Bun tests execute project JavaScript and TypeScript. Requires bun on PATH.