ci: label automated dependency PRs and add CODEOWNERS

Agent-Logs-Url: https://github.com/udx/worker/sessions/390fc7fd-32ef-45c6-880b-55bcf17d958d

Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

Author: Copilot

.github/CODEOWNERS

@@ -0,0 +1,2 @@
+# Default code owners
+* @udx/worker

.github/workflows/docker-dependency-updater.yml

@@ -13,6 +13,7 @@ name: Docker Dependency Updater
 permissions:
   actions: read
   contents: write
+  issues: write
   pull-requests: write
 
 jobs:
@@ -173,6 +174,9 @@ jobs:
 
             Dependabot remains the primary updater for supported ecosystems (Docker base images and GitHub Actions).
             This workflow handles Dockerfile dependency pins that Dependabot does not update.
+          labels: |
+            dependencies
+            docker
           branch: automation/docker-dependency-updates
           delete-branch: true