Disable npm dep upgrades

(we'll handle manually due to all the PR noise)
NOTE: PRs will still be opened for security fixes

Author: markcellus

.github/dependabot.yml

@@ -4,3 +4,5 @@ updates:
       directory: '/'
       schedule:
           interval: monthly
+      # Disable npm dep upgrades - will handle manually from now on
+      open-pull-requests-limit: 0