Topic: ci-cd

Keep dependency updates local before the bot opens a PR

npm-check-updates and python-check-updates are small scouts for dependency drift, not replacements for CI.