Make bench workspace deps version-agnostic and resync lock

Pin @onkernel/cua-agent and @onkernel/cua-ai to "*" so the private bench
package keeps resolving the workspace siblings across version bumps, and
regenerate package-lock.json against the current tree.

Author: pbjaru

package-lock.json

@@ -16,8 +16,8 @@
     "typecheck": "tsc -b"
   },
   "dependencies": {
-    "@onkernel/cua-agent": "0.3.4",
-    "@onkernel/cua-ai": "0.3.1",
+    "@onkernel/cua-agent": "*",
+    "@onkernel/cua-ai": "*",
     "@onkernel/sdk": "0.49.0"
   },
   "devDependencies": {