chore(deps): bump yargs-parser from 21.1.1 to 22.0.0 (#108)

* chore(deps): bump yargs-parser from 21.1.1 to 22.0.0

Bumps [yargs-parser](https://github.com/yargs/yargs-parser) from 21.1.1 to 22.0.0.
- [Release notes](https://github.com/yargs/yargs-parser/releases)
- [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs-parser@yargs-parser-v21.1.1...yargs-parser-v22.0.0)

---
updated-dependencies:
- dependency-name: yargs-parser
  dependency-version: 22.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* ci: skip Vercel preview deploy for Dependabot PRs (no secrets access)

Dependabot PRs run from the same repo (not a fork), so the deploy
step's fork-only guard let it through even though GitHub withholds
repository secrets from dependabot-actor runs. That caused
deploy.mjs to fail with 'missing --token'. Treat dependabot[bot]
runs the same as fork PRs: build/lint/typecheck/test still run,
but preview deploy and lighthouse are skipped until a maintainer
adds the 'trusted' label.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude <hasparus@gmail.com>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

Author: 3 people

package.json

@@ -49,7 +49,7 @@
     "unified": "^11.0.5",
     "unist-util-visit": "^5.1.0",
     "vercel": "^51.7.0",
-    "yargs-parser": "^21.1.1"
+    "yargs-parser": "^22.0.0"
   },
   "devDependencies": {
     "@astrojs/rss": "^4.0.18",