chore(deps): ignore @cipherstash/protect-ffi in Dependabot

protect-ffi is release-managed manually alongside stack releases, and grouped
bumps are actively harmful: "group consistency" upgraded the sunsetting
packages/protect off its 0.23.0 pin (0.24+ renames the exports it imports)
while DOWNGRADING the stack packages from 0.29.0. Ignore it like the other
manually-managed @cipherstash deps so Dependabot stops re-proposing the bump.

Claude-Session: https://claude.ai/code/session_01MxTTPaPP16m6br7Hoab94w

Author: coderdan

.github/dependabot.yml

@@ -37,6 +37,12 @@ updates:
     ignore:
       # Catalog-managed; bump manually via pnpm-workspace.yaml + changeset.
       - dependency-name: "@cipherstash/auth"
+      # Release-managed manually alongside stack releases. Grouped bumps are
+      # actively harmful here: Dependabot's "group consistency" once upgraded
+      # the sunsetting packages/protect off its 0.23.0 pin (0.24+ renames the
+      # exports it imports) while DOWNGRADING the stack packages from 0.29.0
+      # (see #673).
+      - dependency-name: "@cipherstash/protect-ffi"
       # 0.x bumps ship breaking type changes (e.g. 0.2 → 0.3 tightened the
       # FailureOption constraint). Review and apply manually.
       - dependency-name: "@byteslice/result"