chore: configure grouped dependency updates

[enliven17]

Problem

Dependencies span npm, Python, Rust, Stellar, and Noir ecosystems and currently have no update policy.

Scope

Implement this as one focused change in devx. Keep unrelated refactors out of the pull request.

Acceptance Criteria

• Configure automated dependency update checks for npm, pip, Cargo, and GitHub Actions
• Group low-risk patch updates
• Keep Stellar, Noir, and proof-system updates separate for focused review
• Set a conservative schedule and PR limit

Test Plan

• Validate the configuration and document how maintainers can pause or ignore an update.
• Existing checks for the affected workspace pass.

Out of Scope

• Unrelated product features or broad dependency upgrades.
• Production deployment or changes to live credentials.

Drips Wave

Complexity: trivial

Before starting, apply through Drips Wave and wait to be assigned. The pull request must include Closes #, test evidence, and any relevant screenshots or security notes.

[Nohted]

@Nohted has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

Hi! I'd like to take this issue. I'll work on adding test coverage for the remaining PoolsService methods and open a PR soon.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Nohted to this issue.

[drips-wave]

Congratulations, @Nohted! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on July 30, 2026.

🧑‍💻 @Nohted: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊