throttle dependabot PRs

[cdc-mitzimorris]

• Groups all GitHub Actions bumps into one PR.
• Groups routine uv minor/patch updates into one PR.
• Leaves major updates as separate PRs, which is usually worth it because they deserve review.
• Delays fresh releases a bit with cooldown, reducing churn from rapid follow-up releases.
• Keeps pyproject.toml ranges stable with versioning-strategy: increase-if-necessary.
• Lowers the open Dependabot version-update PR cap to 3. GitHub’s default is 5

Security updates are handled differently: grouping can apply to security updates too, but cooldown does not apply to security PRs, and GitHub has a separate security PR limit.

[github-actions]

Thank you for your contribution @cdc-mitzimorris 🚀! Your github-pages is ready for download 👉 here 👈!
_{(The artifact expires on 2026-07-13T22:06:12Z. You can re-generate it by re-running the workflow here.)}

[cdc-mitzimorris]

@dylanhmorris and @damonbayer - filing this because dependabot wanted to change pyproject.toml lower bounds as well as update uv lockfiles.
I think that the pyproject.toml lower bounds should represent the minimum version PyRenew actually requires, not the newest version Dependabot resolved. The lockfile can move forward, but the package metadata should only tighten when our code depends on newer features/behavoirs.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.67%. Comparing base (eebec96) to head (6b33e51).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #851   +/-   ##
=======================================
  Coverage   98.67%   98.67%           
=======================================
  Files          57       57           
  Lines        2191     2191           
=======================================
  Hits         2162     2162           
  Misses         29       29           

Flag	Coverage Δ
unittests	98.67% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.