ci: add CI with OpenCode e2e, weekly latest-OpenCode e2e, release workflow, and Dependabot

- ci.yml: unit tests on Node 22, 24, 26 plus the end-to-end check against OpenCode 1.18.31 + 2.0.32 and 1.19.3 + 2.1.0
- e2e-latest.yml: weekly end-to-end run against the newest opencode-ai and @opencode/cli releases
- release.yml: tag vX.Y.Z reruns CI and publishes with npm trusted publishing
- Jobs run on GitHub only; the Gitea origin's runner skips them
- Dependabot proposes grouped npm and Actions updates weekly

.github/dependabot.yml

@@ -0,0 +1,30 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7
+    groups:
+      opencode-plugin-sdks:
+        patterns: ["@opencode-ai/plugin", "@opencode/plugin"]
+      dev-dependencies:
+        dependency-type: development
+    ignore:
+      # TypeScript 7 ships no tsserver.js, which editors and typescript-language-server still need.
+      - dependency-name: typescript
+        update-types: ["version-update:semver-major"]
+      # @types/node tracks the oldest Node version CI tests (22).
+      - dependency-name: "@types/node"
+        update-types: ["version-update:semver-major"]
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7
+    groups:
+      actions:
+        patterns: ["*"]