chore: drop lockfile-check.yml workflow and scaffold template

scripts/migrate/phase-scaffold.ts

@@ -2,8 +2,7 @@ import * as fs from "node:fs";
 import * as path from "node:path";
 import type { MigrationContext } from "./types";
 import { log, logPhase } from "./types";
-import { CANONICAL_BUN_VERSION, generatePackageJson } from "./templates/package-json";
-import { generateLockfileCheckYml } from "./templates/lockfile-check-yml";
+import { generatePackageJson } from "./templates/package-json";
 import { generateTsconfig } from "./templates/tsconfig";
 import { generateViteConfig } from "./templates/vite-config";
 import { generateKnipConfig } from "./templates/knip-config";
@@ -73,16 +72,6 @@ export function scaffold(ctx: MigrationContext): void {
     tabWidth: 2,
   }, null, 2) + "\n");
 
-  // PR-time lockfile guardrail. Lives in the site repo (per-site, not
-  // a centralised reusable workflow) because per D6.3 we are not
-  // scaffolding caller stubs into storefronts. Bun version is pinned
-  // in lockstep with `package.json` via CANONICAL_BUN_VERSION.
-  writeFile(
-    ctx,
-    ".github/workflows/lockfile-check.yml",
-    generateLockfileCheckYml(CANONICAL_BUN_VERSION),
-  );
-
   // Server entry files (server.ts, worker-entry.ts, router.tsx, runtime.ts, context.ts)
   writeMultiFile(ctx, generateServerEntry(ctx));
 

scripts/migrate/phase-verify.ts

@@ -17,7 +17,6 @@ const REQUIRED_FILES = [
   // Workers Builds (D6.3) -- configured in the CF dashboard, not via
   // GitHub workflow files in the site repo.
   ".github/workflows/regen-blocks.yml",
-  ".github/workflows/lockfile-check.yml",
   "knip.config.ts",
   ".prettierrc",
   "src/server.ts",

scripts/migrate/templates/package-json.ts

@@ -2,13 +2,11 @@ import { execSync } from "node:child_process";
 import type { MigrationContext } from "../types";
 
 /**
- * Fleet-wide canonical bun version. Bumped here propagates to all newly
- * migrated sites via the `packageManager` field AND the
- * `lockfile-check.yml` workflow's `bun-version` input. See
- * MIGRATION_TOOLING_PLAN.md for the bun-canonical decision.
- *
- * Exported because the lockfile-check workflow template reads it
- * directly to keep both files in lockstep.
+ * Fleet-wide canonical bun version. Propagates to all newly migrated
+ * sites via the `packageManager` field — Corepack-aware tooling (npm
+ * 10+, yarn 4+, pnpm 9+) reads this and refuses to install with the
+ * wrong package manager, which is the actual enforcement we rely on.
+ * See MIGRATION_TOOLING_PLAN.md for the bun-canonical decision.
  */
 export const CANONICAL_BUN_VERSION = "1.3.5";