chore(dependabot): ignore major/minor python base-image bumps

chore(deps): bump actions/upload-artifact from 4 to 7 (#5)

chore(deps): bump actions/checkout from 4 to 7 (#4)

chore(deps): bump actions/setup-python from 5 to 6 (#2)

fix(ci): repair security scan workflow (gitleaks version + rpy2 build) (#7)

feat(security): ADR-0014 CI security scanning + shared scan definition