fix(docker): remove --frozen flag to tolerate Bun patch-version lockfile drift

oven/bun:1.3-alpine resolves to a newer patch (e.g. 1.3.14) than the version
used locally (1.3.5). Bun's lockfile text format can shift between patches,
making --frozen fail with "lockfile had changes" even though dependencies are
identical. Dropping --frozen keeps the lockfile for resolution without
enforcing a byte-for-byte match on re-serialisation.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: GravityDarkLab

api/Dockerfile

@@ -5,11 +5,14 @@
 FROM oven/bun:1.3-alpine AS deps
 WORKDIR /app
 
-# Copy lockfile alongside package.json so `--frozen` can enforce it.
-# The api-level bun.lock is a copy of the root workspace lockfile scoped to
-# this package; regenerate it with `bun install` at the monorepo root.
+# Copy lockfile alongside package.json so Bun resolves the exact dependency
+# graph pinned at development time. --frozen is intentionally omitted: Bun's
+# lockfile text format can shift between patch releases, causing false
+# "lockfile had changes" failures when the image's Bun version differs from
+# the one that generated the lockfile locally. The lockfile is still used for
+# resolution; it is just not re-serialised to disk for comparison.
 COPY package.json bun.lock ./
-RUN bun install --frozen --production
+RUN bun install --production
 
 # ─── Stage 2: lean production image ──────────────────────────────────────────
 FROM oven/bun:1.3-alpine AS runner

frontend/Dockerfile

@@ -3,9 +3,11 @@ FROM oven/bun:1.3-alpine AS builder
 WORKDIR /app
 
 COPY package.json bun.lock ./
-# --frozen enforces the lockfile (bun.lock TOML format, Bun ≥ 1.1)
-# --frozen-lockfile was the old flag for the legacy binary bun.lockb
-RUN bun install --frozen
+# --frozen is omitted intentionally — Bun's lockfile text format can shift
+# between patch releases, causing false failures when the image Bun version
+# differs from the one that generated the lockfile. Resolution still uses the
+# lockfile; it is just not re-serialised for comparison.
+RUN bun install
 
 COPY . .