v0.2.0 — pnpm-workspace.yaml support

Added

• pnpm parser now reads overrides from pnpm-workspace.yaml in addition to pnpm.overrides in package.json. When the same key appears in both, the workspace YAML value wins (matches pnpm's own precedence).
• yaml runtime dependency for parsing pnpm-workspace.yaml.
• Dependabot configuration for automated npm and GitHub Actions dependency updates.

Changed

• Parser dispatcher (parseOverrides) is now async and accepts cwd as a third argument. The pnpm parser signature is (packageJson, cwd) => Promise<Override[]>; other parsers retain their synchronous in-memory signatures.
• README install instructions now recommend the per-project (dev dependency) flow, with global install documented as an alternative for ad-hoc use.