#40039 test: keep audit fixture advisory range clear of Bun.version

normalizeBunSnapshot replaces the current Bun version string. The mime advisory fixture used <1.4.1, which collided once Bun became 1.4.1 and broke the bun-audit.test.ts snapshot on every platform. Moved the range to <1.3.5 (mime@1.3.4 still matches).