chore(dependabot): add github-actions + docker ecosystems, fix grouping and scheduling

[dzhhem]

Description

Expanded .github/dependabot.yml from a single npm entry to full monorepo coverage across npm, GitHub Actions, and Docker ecosystems.

Closes #32

Type of change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update
• Refactoring (no functional changes)

How Has This Been Tested?

Dependabot config changes are validated by GitHub on push — no local tests apply.

• Unit tests (Jest/Vitest)
• Integration tests
• Manual testing (screenshots/screencasts encouraged)

Config validated against Dependabot docs. Changes verified by reviewing all workflow files and Dockerfiles in the repo.

Summary of changes:

Ecosystem	Directory	Day	Limit	Groups
npm	/	Sunday	10	prod (minor/patch), dev (minor/patch)
github-actions	/	Monday	5	all (minor/patch); majors solo
docker	/apps/api	Tuesday	2	—
docker	/apps/web	Tuesday	2	—
docker	/apps/bot	Tuesday	2	—
docker	/scripts	Tuesday	2	—

Checklist:

• My code follows the style guidelines of this project
• I have performed a self-review of my own code
• I have documented non-obvious behavior or constraints where necessary
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes
• Any dependent changes have been merged and published in downstream modules
• (If API) Database migrations have been created and tested
• (If UI) Changes look good on mobile and desktop

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
fin-track-web	Ready	Preview, Comment	May 13, 2026 7:35am