Add dependency hardening defaults

[tamlut-modnys]

Summary

• add CODEOWNERS coverage for dependency manifests and lockfiles
• add weekly Dependabot version update config
• add Socket trigger paths for dependency-manifest and lockfile changes

Follow-up

• install and authorize the Socket GitHub App so socket.yml becomes active
• enable required status checks for Socket on dependency-changing pull requests