CIT-5223: bump @kiva/kv-shop to ^3.8.32

[JoeTravisKiva]

CIT-5223 — the ui half. The kv-shop change is kiva/kv-ui-elements#905, merged and released as 3.8.32.

Why

Express checkout's credit controls (ExpressCheckoutTotals.vue → applyKivaCredit / removeKivaCredit) run through kv-shop's callShopMutation, not src/util/basketUtils.js — so CIT-5181 (#7266) does not reach them.

Before 3.8.32, parseShopError had no mapping for checkout_in_progress / shop.checkoutInProgress, so both hit its catch-all and returned "An unknown error occurred." with the original code rewritten to shop.unknown. That rewrite is why it could not be fixed from ui — there was nothing left to classify on.

What

One line in package.json, plus the lockfile. The lockfile diff touches only @kiva/kv-shop — no other package moved.

Verification

• Confirmed the published 3.8.32 tarball actually contains the fix (both codes and the expected copy) before bumping, rather than assuming the release included it
• Confirmed the installed build carries it after npm install
• 341 test files / 5444 tests passing, lint clean (149 warnings, all pre-existing)

Notes

• Independent of feat: [CIT-5181] show real copy when the basket is locked by an in-flight checkout #7266. That PR scopes the credit paths out explicitly. Either can merge first.
• The copy is still the shared placeholder pending design/content review — same string as feat: [CIT-5181] show real copy when the basket is locked by an in-flight checkout #7266, now in both places.
• node_modules was stale before this (3.8.9 installed against a lockfile pinning 3.8.28). The lockfile itself was fine; only the local install had drifted, and npm install resolved it. Worth a npm ci locally if you had the same drift.

🤖 Generated with Claude Code