update dependabot for security only

Author: BeFranke

.github/dependabot.yml

@@ -11,21 +11,25 @@ updates:
     directory: /
     schedule:
       interval: monthly
+    open-pull-requests-limit: 0  # prevents normal PRs, allows security PRs
 
   # Maintain dependencies inside uv lock file
   - package-ecosystem: uv
     directory: /
     schedule:
       interval: monthly
+    open-pull-requests-limit: 0  # prevents normal PRs, allows security PRs
 
   # Maintain dependencies for GitHub actions
   - package-ecosystem: github-actions
     directory: /
     schedule:
       interval: monthly
+    open-pull-requests-limit: 0  # prevents normal PRs, allows security PRs
 
   # Maintain dependencies for pre-commit config
   - package-ecosystem: pre-commit
     directory: /
     schedule:
       interval: monthly
+    open-pull-requests-limit: 0  # prevents normal PRs, allows security PRs