fix: dco merge skip, dependabot docs, token perms tightening + rebase helper for best scorecard - #350

Warning: Code scanning cannot determine the alerts introduced by this pull request, because 1 configuration present on refs/heads/main was not found:

Actions workflow (security.yaml)

• ❓  .github/workflows/security.yaml:codeql

View all branch alerts.