fix: apply suggestions from code review

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Author: btravers

.github/dependabot.yml

@@ -27,8 +27,8 @@ updates:
       # Only allow @types/node patch/minor updates (block major version bumps)
       - dependency-name: "@types/node"
         update-types: ["version-update:semver-major"]
-    # Mirror pnpm's minimumReleaseAge: wait before proposing freshly published versions.
-    # Dependabot does not read pnpm-workspace.yaml, so this must be configured here.
+    # Apply a 7-day minimum package age (similar to pnpm's minimumReleaseAge).
+    # Note: Dependabot can't express pnpm's minimumReleaseAgeExclude list; this applies to all updates.
     cooldown:
       default-days: 7
     open-pull-requests-limit: 10

pnpm-workspace.yaml

@@ -60,7 +60,7 @@ catalog:
   yaml: 2.9.0
   zod: 4.4.3
 
-minimumReleaseAge: 10080
+minimumReleaseAge: 10080 # 7 days, in minutes
 minimumReleaseAgeStrict: true
 
 # unthrown and its companions are first-party (btravstack) packages; exempt them