Add Dependabot and hash-pin GHA #85

Job	Run time
Check backend lockfile is up to date	4s
Backend tests	40s
Frontend Lint & Typecheck	31s
	1m 15s

Provide feedback