fix: require manual dependency merges (#117)

* fix: require manual dependency merges

Co-Authored-By: Codex <noreply@openai.com>

* fix: retain disabled workflow tombstones

Co-Authored-By: Codex <noreply@openai.com>

* fix: preserve sensitive path ownership

Co-Authored-By: Codex <noreply@openai.com>

---------

Co-authored-by: Codex <noreply@openai.com>

Author: Pigbibi

.github/CODEOWNERS

@@ -1 +1,8 @@
-* @Pigbibi
+# Gateway control, deployment, and credential-handling changes require owner visibility.
+/.github/CODEOWNERS @Pigbibi
+/.github/workflows/ @Pigbibi
+/2fa_bot.py @Pigbibi
+/Dockerfile @Pigbibi
+/docker-compose.yml @Pigbibi
+/container_overrides/ @Pigbibi
+/scripts/ @Pigbibi

.github/workflows/dependabot_auto_merge.yml

@@ -1,9 +1,8 @@
 name: Auto Merge Dependabot PR
 
+# Disabled tombstone: runtime and credential repositories require manual dependency merges.
 "on":
-  workflow_run:
-    workflows: ["CI"]
-    types: [completed]
+  workflow_dispatch:
 
 jobs:
   auto-merge:

.github/workflows/dependabot_review_request_cleanup.yml

@@ -1,8 +1,8 @@
 name: Dismiss Dependabot Review Request
 
+# Disabled tombstone: automatic cleanup cannot retract an already-sent review notification.
 "on":
-  pull_request_target:
-    types: [review_requested]
+  workflow_dispatch:
 
 permissions:
   contents: read