ci: fix auto-merge workflow flags and merge strategy

ci: enforce CI gate and skip major updates in dependabot auto-merge

ci: add dependabot auto-merge workflow

build(deps): bump actions/checkout from 4 to 6 (#6)

build(deps): bump actions/setup-python from 5 to 6 (#7)

ci: add concurrency groups, timeouts, and path filtering

fix: address critical and medium post-audit findings

ci(deps): consolidate to pyproject.toml, remove requirements files

ci: add release workflow and claude-forge skills

Bump actions/setup-python from 5 to 6 (#3)

Bump actions/checkout from 4 to 6 (#2)

Add CI workflow for tests, linting, and type checking