Dependabot (pip + github-actions) + auto-merge policy

[ulises-jeremias]

Summary

Automated dependency PRs with safe auto-merge for bots.

CNA mapping

CNA: .github/dependabot.yml + dependabot-auto-merge.yml.

Acceptance criteria

• Dependabot config for pip and actions
• Auto-merge workflow limited to dependabot actor

Blocked by

none

Blocks

none

Reference

Parity matrix (workspace): knowledge/create-python-app-parity-matrix.md
Reference repo: https://github.com/Create-Node-App/create-node-app

Parent epic

#7