fix(cli): pin @types/bun in script/upstream so bun install works standalone

The catalog: protocol only resolves when the package is part of the root
workspace. script/upstream is intentionally decoupled from the monorepo
so it can run during upstream merges (when the workspace may be in a
half-broken state), which means 'cd script/upstream && bun install'
failed with 'failed to resolve catalog:'. Pin to the version currently
in the root catalog.

script/upstream/package.json

@@ -19,6 +19,6 @@
     "ts-morph": "^24.0.0"
   },
   "devDependencies": {
-    "@types/bun": "catalog:"
+    "@types/bun": "1.3.13"
   }
 }