chore(dependabot): cap open pull requests per update block

[hyperpolymath]

Adds open-pull-requests-limit to Dependabot update blocks that had no cap, following the estate per-ecosystem cap doctrine (task #37). No other line in the file is touched.

Claude-Session: https://claude.ai/code/session_011eQ7hibx92N7fBDtwgReWk

Summary

Closes #

Type of change

• 🐛 Bug fix (non-breaking change that fixes an issue)
• ✨ New feature (non-breaking change that adds functionality)
• 💥 Breaking change (would change existing behaviour)
• 🕳️ Soundness fix (fixes a checker/proof false-negative)
• 📖 Documentation
• 🧹 Refactor / tech debt (behaviour-preserving)
• ⚡ Performance
• 🔧 Build / CI / tooling

How has this been verified?

Checklist

• My commits are signed (git commit -S).
• I ran the project's own checks/tests locally and they pass.
• New files carry the correct SPDX-License-Identifier (code/config MPL-2.0,
  prose CC-BY-SA-4.0); I did not relicense existing files.
• Docs are updated, and no public claim now overstates what the code does.
• I have not introduced a soundness hole (or I have flagged where I might have).

Notes for reviewers

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: f849a74d-a057-4a2d-b91d-9a7de3b45ca3

📥 Commits

Reviewing files that changed from the base of the PR and between a211fe1 and 4e69cd5.

📒 Files selected for processing (1)

• .github/dependabot.yml

---

📝 Summary

Summary by CodeRabbit

• Chores
  • Automated dependency update handling has been adjusted.
  • Up to two open update requests for GitHub Actions are now permitted at a time.
  • Automated update requests for Cargo dependencies are no longer opened.

Walkthrough

The Dependabot configuration disables Cargo update pull requests and permits up to two open GitHub Actions update pull requests.

Changes

Dependabot update limits

Layer / File(s)	Summary
Configure update limits .github/dependabot.yml	Cargo updates now allow zero open pull requests. GitHub Actions updates now allow up to two open pull requests.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Other

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit checks the update gate
Cargo waits beside the crate
Two Action hops now cross the line
Dependabot keeps the queue in time
Ears up, the settings shine}

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud