fix(ci): Windows build must not publish; throttle Dependabot

[NeuroKoder3]

Summary

• Windows Build Verification was failing on main because electron-builder tried to publish a GitHub Release without GH_TOKEN.
• build:win now uses --publish never; CI sets ELECTRON_BUILDER_PUBLISH=never.
• Dependabot open-PR limits cut to 2/2/1 and all major bumps ignored so it cannot flood the repo again.
• Closed Dependabot PRs deps(server): bump eslint from 9.39.4 to 10.8.0 in /server #201-ci: bump github/codeql-action from 4 to 4.37.3 #211.

Test plan

• CI Windows Build Verification passes on this PR
• Confirm open Dependabot PR count stays near zero

Made with Cursor

[strix-security]

Strix is installed on this repository, but we couldn't run this PR security review because this workspace's trial has ended. Add a card to resume code reviews here.