build(deps): move the pinned bun to 1.3.14

The previous commit added baseUrl to claw-app so the restated path
aliases would resolve under the pinned bun. TypeScript 7 removed that
option, so typecheck failed with TS5102 even though the runtime tests
went green.

Bun 1.3.14 resolves relative path entries without baseUrl, so raising the
pin fixes both at once and removes the option again.

It also closes a divergence that made local results untrustworthy. The
pinned 1.3.6 ignores globalStore entirely and resolves tsconfig paths
differently, so a developer on a current bun could see green locally while
CI ran a materially different configuration. CI now installs the same way
developers do.

Verified on 1.3.14:
  bun install --frozen-lockfile   no lockfile changes
  full typecheck                  39 findings, zero config-level
  claw-app suite                  75 pass, 4 fail, matching main exactly
  release workflow suites         65 pass

The four claw-app failures are pre-existing and order dependent; they
reproduce identically against main's config on both bun versions.

The macOS builder keeps a literal pin because it has no workspace
checkout to read the version file from, so it is raised in step.

Author: DaniAkash

.github/workflows/release-macos.yml

@@ -273,7 +273,7 @@ jobs:
         # falls back to latest. Keep in sync with packageManager.
         uses: oven-sh/setup-bun@v2
         with:
-          bun-version: "1.3.6"
+          bun-version: "1.3.14"
 
       - name: Install BrowserOS server dependencies
         if: steps.inputs.outputs.resource_mode == 'source' && steps.inputs.outputs.products == 'browseros'

packages/browseros-agent/apps/claw-app/tsconfig.json

@@ -6,10 +6,6 @@
     "jsx": "react-jsx",
     // wxt 0.21's generated base turns on noUncheckedIndexedAccess; opt back out until the codebase adopts it deliberately.
     "noUncheckedIndexedAccess": false,
-    // baseUrl is required, not decorative: without it the entries below resolve
-    // under tsc but not under Bun's runtime resolver, which drops every @/
-    // import at test time.
-    "baseUrl": ".",
     // The global virtual store links dependencies in from a store outside the
     // project, and TypeScript resolves those symlinks to their real path. A
     // dependency re-exporting React's own types (LucideProps extending

packages/browseros-agent/package.json

@@ -99,13 +99,13 @@
     "yaml": "2.9.0"
   },
   "engines": {
-    "bun": "1.3.6",
+    "bun": "1.3.14",
     "node": "please-use-bun",
     "npm": "please-use-bun",
     "yarn": "please-use-bun",
     "pnpm": "please-use-bun"
   },
-  "packageManager": "bun@1.3.6",
+  "packageManager": "bun@1.3.14",
   "overrides": {
     "serialize-javascript": "7.0.3",
     "lodash-es": "^4.18.0",