chore(deps): ignore major typescript bumps in dependabot

[stormmuller]

Summary

• PR chore(deps-dev): bump typescript from 5.9.3 to 7.0.2 #603 (chore(deps-dev): bump typescript from 5.9.3 to 7.0.2) fails its setup/Build CI jobs at npm ci with an ERESOLVE peer dependency conflict, not because of anything wrong in this repo's source, but because typescript-eslint@8.67.0 — the latest published release, already in use here — caps its typescript peerDependency at >=4.8.4 <6.1.0. There is no newer typescript-eslint release that lifts this cap yet (confirmed against the npm registry).
• TypeScript 7.0 is a from-scratch native/Go-based rewrite of the compiler (the "Corsa" port), a genuine architecture change rather than an incremental release, so it's unsurprising the ecosystem (starting with typescript-eslint) hasn't caught up.
• Since Dependabot will otherwise keep re-proposing this same broken bump every week, this PR adds an ignore rule to .github/dependabot.yml blocking major-version typescript updates until typescript-eslint supports the new major. A follow-up bump can be made deliberately once that support lands.
• Added ERESOLVE to the project's cspell word list since it's now referenced in a comment.

I'm closing #603 as unmergeable with a comment pointing here, since forcing the install (--legacy-peer-deps) would leave typescript-eslint's TS7 compatibility unverified and risk silently-wrong lint/type results.

Related issue(s)

Addresses the CI failure in #603.

Verification checklist

This is a CI/tooling-config-only change (.github/dependabot.yml, .cspell/project-words.txt) with no /src impact, so the /src-focused checks aren't applicable:

• npm run cspell passes with 0 errors (verified via npx cspell on the changed files)
• .github/dependabot.yml YAML validated (python3 -c "import yaml; yaml.safe_load(open('.github/dependabot.yml'))")
• npm run check-types — not applicable, no /src changes
• npm test — not applicable, no /src changes
• npm run lint — not applicable, no /src changes (ESLint only targets src)
• npm run check-exports — not applicable, no module/export changes
• No public API changed, no new module added
• No documentation-site or demo changes needed (this doesn't touch a documented engine feature)

Changelog

• Not required — this is a chore change (CI/dependency-config tooling).

---

Generated by Claude Code

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!