[Fix] Split dependency updates into weekly minor and quarterly major

[akash9676]

Summary

Splits the automated dependency workflow into weekly minor/patch PRs (gated on make audit) and quarterly major-update reminder PRs that require manual testing before merge.

New Dev Features

• Weekly job bumps only minor/patch versions via npm-check-updates --target minor, runs make audit, and opens a PR only when audit passes
• Quarterly job (1 Jan / 1 Apr / 1 Jul / 1 Oct) bumps major versions only and opens a reminder PR marked as needing testing
• Manual workflow_dispatch still runs both jobs

Known Limitations

• Major PRs are not audit-gated; review and testing stay manual
• If weekly audit fails after bumps, no PR is opened for that run