chore(dependabot): ignore semver-major bumps that break the toolchain stack

Prevent recurrence of the breakage fixed in d13b984:
- eslint major (ESLint 10 dropped rule-context getFilename; eslint-plugin-react
  peer range caps at ^9.7) -> react/display-name crash
- typescript major (typescript-eslint 8.x peer caps <6.1.0)
- @tsparticles/* major (registry SparklesCore targets v3 API)
- eslint-config-next + eslint-plugin-react majors (framework/plugin train)

Also add github-actions ecosystem (weekly, grouped) and labels.

.github/dependabot.yml

@@ -5,6 +5,8 @@ updates:
     schedule:
       interval: "daily"
     open-pull-requests-limit: 10
+    labels:
+      - "dependencies"
     groups:
       production:
         dependency-type: "production"
@@ -16,3 +18,34 @@ updates:
         update-types:
           - "minor"
           - "patch"
+    ignore:
+      # ---- Toolchain pins: semver-major bumps break the lint/typecheck stack ----
+      # ESLint 10 dropped rule-context getFilename(); eslint-plugin-react (^7.37.x)
+      # peer range caps at eslint ^9.7 -> react/display-name crash at load.
+      - dependency-name: "eslint"
+        update-types: ["version-update:semver-major"]
+      # typescript-eslint 8.x peer range is ">=4.8.4 <6.1.0" -> TS 7 hard-refuses.
+      - dependency-name: "typescript"
+        update-types: ["version-update:semver-major"]
+      # @tsparticles v4 changed its exported API; the vendored SparklesCore from the
+      # Aceternity registry targets the v3 API (initParticlesEngine, IEffect.fill...).
+      - dependency-name: "@tsparticles/*"
+        update-types: ["version-update:semver-major"]
+      # eslint-config-next majors follow Next.js majors and can pull incompatible
+      # plugin versions; framework majors are deliberate, not auto-bumps.
+      - dependency-name: "eslint-config-next"
+        update-types: ["version-update:semver-major"]
+      # eslint-plugin-react 8.x targets ESLint 10, which conflicts with the
+      # pinned eslint ^9 (and the vendored components' validated toolchain).
+      - dependency-name: "eslint-plugin-react"
+        update-types: ["version-update:semver-major"]
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      actions:
+        patterns: ["*"]
+        update-types:
+          - "minor"
+          - "patch"