chore: sync docs and ignore local artifacts

Author: Patel230

.DS_Store

@@ -9,3 +9,6 @@ basic
 .claude/
 .codegraph/
 coverage.out
+
+# macOS
+.DS_Store

.gitignore

@@ -36,8 +36,6 @@ This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm
 - `.editorconfig` — UTF-8, LF, final newline, trim trailing whitespace,
   tabs for Go + Makefile, 2-space indent for YAML/JSON/TOML, no-trim
   for Markdown.
-- `.github/dependabot.yml` — weekly `gomod` (root + `browser/`
-  sub-module) + `github-actions` updates.
 - `.github/PULL_REQUEST_TEMPLATE.md` — Summary / Changes / Scan-
   quality impact / SARIF compatibility / SSRF & egress safety /
   Testing / Checklist.

CHANGELOG.md

@@ -44,8 +44,8 @@ We follow [coordinated vulnerability disclosure](https://en.wikipedia.org/wiki/C
 
 ## Security practices in this repo
 
-- **Dependency monitoring:** automated via Dependabot (see
-  `.github/dependabot.yml`).
+- **Dependency monitoring:** vulnerable dependencies are detected by
+  `govulncheck`, which runs on every CI build (see "Vulnerability scanning").
 - **Static analysis:** `golangci-lint` / `ruff` / `mypy` enforced in CI.
 - **Vulnerability scanning:** `govulncheck` (Go) / `pip-audit` (Python) run
   on every CI build.