2 docs tagged with "dependabot"

Establishes mandatory CI gates with stable check naming, deterministic installs, baseline CodeQL + Dependabot posture, and main-branch enforcement via GitHub Rulesets.

Deterministic workflow to diagnose failing Dependabot pull requests, reproduce failures locally, apply fixes, and push updates back to unblock required checks.