Auto-clean Autodesk Registry URLs [SYNTH-221]

[rutmanz]

Task

SYNTH-221

Symptom

As bun does not support the omit-lockfile-registry-resolved npm option, and Autodesk requires the use of the internal artifactory registry, artifactory URLs will be committed to bun.lock when new packages are installed or the lockfile is otherwise regenerated. This breaks CI and is undesirable in a public repository.

Solution

Bun runs the postinstall script after packages are installed, which removes artifactory urls using regex. Note that I can't use standard commands like sed or > /dev/null and instead use npm packages to support non-unix systems

Verification

if you bun install <whatever> while using the Autodesk registry, the bun.lock file still has no artifactory urls. (Make sure to remove the package after)

---

Before merging, ensure the following criteria are met:

• All acceptance criteria outlined in the ticket are met.
• Necessary test cases have been added and updated.
• A feature toggle or safe disable path has been added (if applicable).
• User-facing polish:
  • Ask: "Is this ready-looking?"
• Cross-linking between Jira and GitHub:
  • PR links to the relevant Jira issue.
  • Jira ticket has a comment referencing this PR.

[azaleacolburn]

L.G.T.M - This is pretty L.I.V.E

[Dhruv-0-Arora]

TWLQSAITILRFM

[AlexD717]

lgtm