Goals: - Enable Dependabot for pip and GH Actions. - Enable CodeQL. Acceptance: - PRs opened on outdated deps. - CodeQL job green.
