chore: safe Dependabot batch + tighten update policy

[sauravgupta-dotcom]

Summary

• Combines only low-risk / green Dependabot updates on one branch for local verification:
  • Actions chore(deps): bump actions/setup-node from 4 to 6 #118–chore(deps): bump actions/deploy-pages from 4 to 5 #122: checkout@v7, pnpm/action-setup@v6, setup-node@v6, upload-pages-artifact@v5, deploy-pages@v5
  • prettier → 3.9.4 (chore(deps-dev): bump prettier from 3.9.0 to 3.9.4 #130)
  • typescript-eslint → 8.62.1 (chore(deps-dev): bump typescript-eslint from 8.62.0 to 8.62.1 #132)
• Tightens .github/dependabot.yml: lower open-PR limits, dependency groups, ignore majors for TypeScript / ESLint / Expo / RN / Jest

Intentionally not included (higher risk or red CI)

PR	Why skipped
#123 TypeScript 6	build failure
#124 Expo 57	platform major — own upgrade
#125 Jest 30	tests failure
#126 ESLint 10	major; needs coordinated @eslint/js
#127 / #129 React / react-dom	#127 quality red / unstable; keep paired later
#128 / #131 RN 0.86 + jest-preset	platform stack — own upgrade

Local verify

git fetch origin chore/dependabot-safe-batch
git checkout chore/dependabot-safe-batch
pnpm install --frozen-lockfile
pnpm typecheck && pnpm lint && pnpm format:check && pnpm test:ci
pnpm --filter react-native-multi-selectbox build

Pre-push local checks on this branch: typecheck, lint, format, tests (41), and library build all passed.

After merge, close superseding Dependabot PRs #118–#122, #130, #132 (or @dependabot close).