* Add frozen_lockfile config option to control lockfile enforcement
Add a `frozen_lockfile: bool = True` option to the Config class that
determines whether the package manager runs in lockfile-enforcing mode.
Reflex still creates, manages, and syncs the lockfile regardless; this
setting only controls whether a lockfile/package.json mismatch is fatal.
The flag gates bun's `--frozen-lockfile` on the initial install (npm has
no equivalent install flag today, so it remains a no-op there). Defaulting
to True preserves existing behavior, and REFLEX_FROZEN_LOCKFILE overrides
it via the standard env-var mechanism.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LsCpapC9gpftmHMqdrqBUo
* Tighten frozen_lockfile docstring
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LsCpapC9gpftmHMqdrqBUo
* Add changelog fragments for frozen_lockfile feature
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LsCpapC9gpftmHMqdrqBUo
---------
Co-authored-by: Claude <noreply@anthropic.com>