Enable Dependency Security and Automation

[hcaballero2]

Description

The audit report indicates that security risks from dependencies may currently go undetected. This task involves enabling Dependabot and scheduled vulnerability scans to reduce exposure to known security issues.

Steps to Reproduce

1. Create a .github/dependabot.yml configuration file in the repository root.
2. Configure the package-ecosystem for both pip (Backend) and npm (Frontend).
3. Set the schedule.interval to weekly for both ecosystems to manage update frequency and reduce PR noise.
4. Enable GitHub CodeQL or a similar security scanning action to run on a weekly schedule or on every push to the main branch.
5. Define a "reviewers" list in the dependabot.yml to ensure the appropriate maintainers are notified of new update PRs.

Expected Behavior

The repository should automatically generate Pull Requests for dependency updates every week and perform regular security scans, providing automated feedback on the project's security posture.

Additional Information

oss_dev_analytics.md