ci: add dry-aged-deps for dependency freshness checks

[tompahoward]

Summary

• Install dry-aged-deps as a dev dependency for supply-chain-safe dependency freshness monitoring
• Add .dry-aged-deps.json config with exclusions for all 20 currently outdated packages (eslint 8.x ecosystem, jest 27.x, projen 0.58.x, typescript 4.x, etc.) with documented reasons
• Add dry-aged-deps --check step to the GitHub Actions build pipeline
• Add dry-aged-deps --check to the pre-push git hook
• Add .dry-aged-deps.json to cspell ignore paths

Test plan

• dry-aged-deps --check exits 0 with all current outdated deps excluded
• All existing tests pass (5/5, 100% coverage)
• Pre-push hook runs successfully with the new check
• Spellcheck passes with the new config file excluded

https://claude.ai/code/session_01HNvBcQzT1SviRqkUpP5Xce

[mergify]

❌ The current Mergify configuration is invalid

Details

• Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → method → squash
• Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → commit_message_template → {{ title }} (#{{ number }})

{{ body }}

[mergify]

❌ The current Mergify configuration is invalid

Details

• Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → method → squash
• Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → commit_message_template → {{ title }} (#{{ number }})

{{ body }}

[mergify]

❌ The current Mergify configuration is invalid

Details

• Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → method → squash
• Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → commit_message_template → {{ title }} (#{{ number }})

{{ body }}

[mergify]

❌ The current Mergify configuration is invalid

Details

• Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → method → squash
• Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → commit_message_template → {{ title }} (#{{ number }})

{{ body }}

[mergify]

❌ The current Mergify configuration is invalid

Details

• Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → method → squash
• Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → commit_message_template → {{ title }} (#{{ number }})

{{ body }}

[mergify]

❌ The current Mergify configuration is invalid

Details

• Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → method → squash
• Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → commit_message_template → {{ title }} (#{{ number }})

{{ body }}

[mergify]

❌ The current Mergify configuration is invalid

Details

• Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → method → squash
• Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → commit_message_template → {{ title }} (#{{ number }})

{{ body }}

[mergify]

❌ The current Mergify configuration is invalid

Details

• Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → method → squash
• Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → commit_message_template → {{ title }} (#{{ number }})

{{ body }}

[tompahoward]

Splitting into two separate PRs for lower risk.