chore: update lockfile for the three/@types/three removal

CI runs bun install --frozen-lockfile, so dropping the two dependencies from
apps/sim/package.json without regenerating bun.lock fails the install step.

The diff is the two entries plus three's transitives (@dimforge/rapier3d-compat,
@tweenjs/tween.js, @types/stats.js, @types/webxr, @webgpu/types, meshoptimizer).

One change deserves a note: top-level fflate moves 0.8.3 -> 0.4.8. It was
hoisted to 0.8.3 only because @types/three required ~0.8.2; with that gone the
remaining top-level consumer is posthog-js, which asks for ^0.4.8. Every other
consumer keeps its own pinned nested entry (@shuding/opentype.js 0.7.4,
@smithy/middleware-compression 0.8.1), and no source file imports fflate
directly, so no resolution changes for anything that was already installed.

Author: waleedlatif1