add: SECURITY and dependabt #8

	name: CI

	on:
	push:
	branches: ["**"]
	pull_request:
	branches: ["**"]

	jobs:
	test:
	name: Test
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- uses: oven-sh/setup-bun@8f24390df009a496891208e5e36b8a1de1f45135 # v2.0.2
	with:
	bun-version: "1.2.21"

	- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
	with:
	node-version: "22"

	- name: Start SurrealDB
	run: \|
	docker run -d --name surrealdb \
	-p 4321:8000 \
	-e SURREAL_CAPS_ALLOW_EXPERIMENTAL='*' \
	surrealdb/surrealdb:v3.0.5 \
	start --user root --pass root --bind 0.0.0.0:8000 memory
	timeout 30 sh -c 'until curl -sf http://localhost:4321/health; do sleep 1; done'
	docker logs surrealdb

	- name: Install dependencies
	run: bun install --frozen-lockfile

	- name: Lint
	run: bun run lint

	- name: Test
	timeout-minutes: 5
	run: npx vitest run --reporter=verbose
	env:
	SURREAL_URL: ws://127.0.0.1:4321
	SURREAL_USER: root
	SURREAL_PASS: root

	- name: SurrealDB logs (on failure)
	if: failure()
	run: docker logs surrealdb

Provide feedback