Add dependabot remediation agentic workflow

Creates a weekly workflow that reads open Dependabot security alerts,
applies npm dependency updates, verifies the build, and opens a PR
for human review.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: Dedac