fix(ci): group Dependabot updates into one PR per ecosystem #235

Job	Run time
governance / Check Workflow Staleness	9s
governance / Security policy checks	9s
governance / Trusted-base reduction policy	12s
governance / Licence consistency	8s
governance / Guix primary / Nix fallback policy	10s
governance / Workflow security linter	9s
governance / Language / package anti-pattern policy	40s
governance / Code quality + docs	19s
governance / Well-Known (RFC 9116 + RSR)	9s
governance / Validate Hypatia Baseline	-1s
	2m 4s

Provide feedback