chore: Add Dependabot governance config

[soulevilx]

Summary

Add the missing Dependabot configuration used by the current governance baseline.

What changed

• add .github/dependabot.yml for Composer and GitHub Actions updates

Why

• keep dependency automation aligned with the DTO standard

How tested

• composer validate --no-check-publish --strict
• git diff --check

Documentation impact

• governance automation only

Risk / rollback

• low risk; revert this PR to remove the Dependabot configuration

[qodo-code-review]

ⓘ You've reached your Qodo monthly free-tier limit. Reviews pause until next month — upgrade your plan to continue now, or link your paid account if you already have one.

[coderabbitai]

Warning

Rate limit exceeded

@soulevilx has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 59 minutes and 49 seconds before requesting another review.

You’ve run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 89a914d5-e198-4488-8748-0b50d704d6b5

📥 Commits

Reviewing files that changed from the base of the PR and between 8b2b9db and 9664954.

📒 Files selected for processing (1)

• .github/dependabot.yml

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/dependabot-alignment-20260512

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.72%. Comparing base (8b2b9db) to head (9664954).

Additional details and impacted files

@@            Coverage Diff             @@
##             develop       #8   +/-   ##
==========================================
  Coverage      99.72%   99.72%           
  Complexity       128      128           
==========================================
  Files             15       15           
  Lines            364      364           
==========================================
  Hits             363      363           
  Misses             1        1           

Flag	Coverage Δ
unittests	99.72% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.