[P0] **Dependencies and deployment:** expand Dependabot; retain `cargo-deny`; use Trivy only for final images and IaC, including Helm defaults, supported value profiles, and the packaged chart.

[alangou]