Update workflows and dependabot config

Added npm and Docker support to dependabot.yml. Updated deploy and image workflows to use latest actions/checkout and set timeouts. Renamed and improved sync workflow to exclude docs and tests, and updated file copy logic.

.github/workflows/depoly.yml

@@ -1,6 +1,4 @@
 name: Deploy Worker
-permissions:
-  contents: read
 
 on:
   push:
@@ -23,6 +21,8 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     timeout-minutes: 60
+    permissions:
+      contents: read
     steps:
       - uses: actions/checkout@v5
       - name: Deploy Worker

.github/workflows/image.yml

@@ -40,6 +40,7 @@ env:
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
+    timeout-minutes: 30
     permissions:
       contents: read
       packages: write
@@ -48,7 +49,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3

.github/workflows/sync.yml

@@ -1,20 +1,32 @@
-name: Sync Worker to Page
+name: Sync to Page
 
 on:
   push:
     branches:
       - main
+    paths-ignore:
+      - '**.md'
+      - 'LICENSE'
+      - '.gitignore'
+      - '.editorconfig'
+      - '.vscode/**'
+      - 'docs/**'
+      - '.prettierrc*'
+      - '.eslintrc*'
+      - '.github/ISSUE_TEMPLATE/**'
+      - '.github/PULL_REQUEST_TEMPLATE/**'
   workflow_dispatch:
 
 jobs:
   convert-and-sync:
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     permissions:
       contents: write
 
     steps:
       - name: Checkout main branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: main
           fetch-depth: 0
@@ -31,9 +43,8 @@ jobs:
 
       - name: Copy source code files only
         run: |
-          # Copy essential source and config files (no documentation)
+          # Copy essential source and config files (no documentation, no tests)
           cp -r src /tmp/page-conversion/
-          cp -r test /tmp/page-conversion/
           mkdir -p /tmp/page-conversion/.github/workflows
           cp package.json /tmp/page-conversion/
           cp package-lock.json /tmp/page-conversion/ 2>/dev/null || true
@@ -173,7 +184,7 @@ jobs:
           - Update package.json: Change scripts to use Pages commands
           - Update vitest.config.js: Include functions/ in coverage
 
-          Source files only (documentation excluded)."
+          Source files only (documentation and tests excluded)."
 
       - name: Force push to page branch
         run: |