fix(deps): require review for Node type major upgrades

[cucuwang]

Problem and change

Ignoring only @types/node 26.x caused Dependabot to propose 25.x in #43, which also leaves the current 24.x type contract. Require a deliberate review for all Node type major upgrades while retaining minor and patch updates.

Closes #43.

Validation and impact

• YAML parsing and npm semver checks confirm that 25.9.7 and 26.5.1 are major upgrades while 24.x minor/patch updates remain eligible; git diff --check passed.
• CLI, API, JSON and Action runtime contracts preserved.
• Security/dependency impact reviewed: only automatic major-version proposals for @types/node are deferred.
• Scoring/methodology unchanged.
• The inline policy comment describes the required review.
• No package version, publication, or workflow schedule change.

Hosted CI and CodeQL must pass for this PR head before merging.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.