Prepare Security PRs

Overview

Triage and prepare automated dependency PRs for merge with minimal risk:

• identify dependency bot PRs that actually need intervention
• resolve comments/check failures only when needed
• refresh stale branches safely
• detect superseded PRs
• keep diffs minimal and dependency-focused

Inputs

• owner/repo
• bot_filters (optional list, example: dependabot[bot], renovate[bot], snyk-bot)
• stale_threshold (default: behind_by > 50)
• test_depth (none, targeted, full; default: targeted)
• allow_branch_rewrite (true/false, default: false)