Add cooldown configuration to Dependabot updates

[Copilot]

Super-linter 8.3.0 enforces Dependabot cooldown configuration. The linter flagged missing cooldown settings for both github-actions and npm package ecosystems.

Changes

• Added cooldown.default-days: 7 to github-actions package ecosystem
• Added cooldown.default-days: 7 to npm package ecosystem

This ensures Dependabot only creates PRs for dependencies published at least 7 days ago, reducing supply chain risk from newly released packages.

- package-ecosystem: github-actions
  directory: /
  schedule:
    interval: weekly
  open-pull-requests-limit: 10
  cooldown:
    default-days: 7
  groups:
    actions-minor:
      update-types:
        - minor
        - patch

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.