language-policy.yml:116 comment names Deno as npm's replacement; the replacement is Bun

[hyperpolymath]

Finding

rhodium-standard-repositories/.github/workflows/language-policy.yml:116 carries a
stale comment — verified verbatim at HEAD, 2026-09-22:

# Block new package-lock.json (npm banned 2026-05-25, replacement: Deno).

Deno was banned 2026-09-22. The replacement is Bun. The executable surface of
this step is correct; only the comment is wrong.

Source: developer/.claude/checkpoints/2026-09-22-pipeline-delivery-summary.md §7-2.

Why a comment matters here

The estate has an active, recurring defect class where a guard's comment names a
different thing than the guard checks. A comment naming a banned runtime as the
sanctioned replacement is exactly the artefact that makes the next reader "fix" the
code to match it.

Acceptance criteria

• Comment updated to name Bun as the replacement, with the correct dates
• The executable behaviour is confirmed unchanged (this is a comment-only fix —
  prove it with a diff that touches no logic)
• The rest of the file is checked for the same stale claim

Decision sheet: #787