- Add ignore rule in dependabot.yml for @types/node semver-major updates
- Pin @types/node from ^25 to ^24 (matches node-version in CI workflow)
- Sanctioned exception to the no-blanket-ignore rule: @types/node must
track the runtime Node major, and Dependabot cannot detect the runtime
- Confirmed tsc and cdk synth pass with the pinned version
Closes#3