Add Dependabot/Snyk auto-merge workflow

[Luen]

Summary

• Add .github/workflows/dependabot-auto-merge.yml for Dependabot & Snyk patch/minor auto-merge.
• Validates with install (+ lint/format/test/build per repo).
• Pins Actions SHAs: checkout@v7.0.1, setup-node@v7.0.0 / setup-python@v7.0.0, dependabot/fetch-metadata@v3.1.0.
• Majors stay manual. Uses pull_request (not pull_request_target).

Repo settings to enable

1. Allow auto-merge
2. Actions workflow permissions: Read and write
3. Prefer squash merges
4. Require status check Validate dependency update (recommended)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
jodierummer	Ready	Preview	Aug 14, 2026 2:03am

[github-actions]

🟢 Claude BugBot Analysis

The diff only adds documentation to AGENTS.md (dependency tooling guidance); no code was changed, so there are no logic errors, security issues, or other defects to report.

No bugs were detected in this PR.