Add a Dependabot ignore for @types/node semver-major updates so
Dependabot stops proposing wrong-direction major bumps that would
reference APIs absent at runtime. Pin the package from ^25 (odd,
non-LTS) to ^24, matching the Node major that runs cdk synth/tsc
in CI. tsc --noEmit passes cleanly.