npm minor/patch updates are disabled and handled by weekly lockFileMaintenance,
so the eslint/sass automerge presets (scoped to minor/patch only) could never
fire. Remove them; their updates still auto-merge via the lockfile PR, and their
majors now surface as reviewable PRs per policy.
Wire the missing automerge-typescript preset into automerge-common so TypeScript
majors auto-merge on green CI as intended.
Add a README documenting the update policy, auto-merge safety model, and
supply-chain hardening.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
