ci: add dependency audits and miri

[dev-jodee]

Summary

• add Security workflow with cargo audit, pnpm audit, and Miri checks using the shared setup action
• move Dependabot package update cadence to weekly
• update ws through pnpm overrides and baseline the current exact unpatched npm advisory

Test Plan

• ruby -e "require "yaml"; ARGV.each { |f| YAML.load_file(f) }" .github/dependabot.yml .github/workflows/security.yml .github/actions/setup/action.yml
• git diff --check
• cargo audit --no-fetch
• pnpm audit --ignore GHSA-848j-6mx2-7j84
• cargo +nightly miri test -p escrow-program

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
solana-escrow-program	Ready	Preview, Comment	May 21, 2026 1:14pm