Update workflows and dependabot config

Added npm and Docker support to dependabot.yml. Updated deploy and image workflows to use latest actions/checkout and set timeouts. Renamed and improved sync workflow to exclude docs and tests, and updated file copy logic.

.github/workflows/depoly.yml

@@ -1,6 +1,4 @@
 name: Deploy Worker
-permissions:
-  contents: read
 
 on:
   push:
@@ -23,6 +21,8 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     timeout-minutes: 60
+    permissions:
+      contents: read
     steps:
       - uses: actions/checkout@v5
       - name: Deploy Worker