* Add dependency-review caller workflow
Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.
* chore: retrigger checks
* chore: retrigger dep review (post-fix)
aws-cdk-lib 2.254.0 has a bundled dependency bug where npm ci reports
jsonschema@1.4.1 as missing from the lock file. Pinning to 2.253.1
which is proven working in CI (same version as forgejo).
CDK stack deploying a t4g.small EC2 instance with Samba and FileBrowser
for personal file storage over the site-to-site VPN. Includes 500 GiB
gp3 data volume with daily DLM snapshots.
