chore(deps): ignore actions major bumps in Dependabot (#35)

* feat(scanners): ble_pairing_audit - SMP pairing weakness rules

Reads smp_pairing fingerprints written by recon/ble_pairing_features
and emits findings for the well-documented BLE pairing weaknesses:

- BSA-PAIR-001 Legacy JustWorks (no MITM, no OOB, no SC)
- BSA-PAIR-002 JustWorks under Secure Connections
- BSA-PAIR-003 Legacy Pairing accepted (SC bit not set)
- BSA-PAIR-004 Encryption key size capped below 16 bytes
- BSA-PAIR-005 CSRK distributed under unauthenticated pairing
- BSA-PAIR-006 CT2 set without SC (BLURtooth surface)
- BSA-PAIR-007 Bonding requested under unauthenticated pairing

Each rule cites a Core Spec section, a CVE, or a peer-reviewed
paper. Severity is fixed per rule, never inflated. Confidence
reflects how reliably the fingerprint alone proves the weakness.
Hosts with no smp_pairing fingerprint are reported as gaps that
point at recon/ble_pairing_features.

No new hardware code paths. No network activity. Pure consumer of
the engagement store. 28 tests cover every rule plus the loader
end-to-end flow against an isolated SQLite store.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* chore(deps): ignore actions major bumps in Dependabot

Major version bumps for github-actions reach us as bulk PRs (e.g.
checkout v4 -> v6) that we always close because the SHA pin is the
source of truth. Move them to the manual-review pile so Dependabot
stops opening them.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: V33RU

.github/dependabot.yml

@@ -22,6 +22,12 @@ updates:
       actions:
         patterns:
           - "*"
+    # Major bumps on actions land via SHA pins reviewed by hand. Auto
+    # PRs at this scope produced noise (e.g. checkout v4 -> v6) we
+    # always close.
+    ignore:
+      - dependency-name: "*"
+        update-types: ["version-update:semver-major"]
     commit-message:
       prefix: "ci"
       include: scope