Keep scanner upgrades manually reviewed (#10)

Author: DeliriumPulse

.github/dependabot.yml

@@ -4,3 +4,7 @@ updates:
     directory: /
     schedule:
       interval: weekly
+    # The HOL action wraps a separately reviewed scanner wheel. Upgrade it only
+    # with the workflow comment, validator pin, wheel hash, provenance, and A/B report.
+    ignore:
+      - dependency-name: hashgraph-online/ai-plugin-scanner-action