ci(audit): restore scheduled Bun checks

Dependabot supports Bun version updates but not security updates, so newly disclosed advisories do not change bun.lock or trigger a pull-request audit.

Author: BridgeAR

.github/workflows/audit.yml

@@ -9,6 +9,9 @@ on:
       - "bun.lock"
       - "docs/bun.lock"
       - "vendor/bun.lock"
+  schedule:
+    - cron: "0 6 * * 1"
+  workflow_dispatch:
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref == 'refs/heads/master' && github.run_id || github.ref }}