Add CI badge, dependabot config, PR template, auto-release workflow

.github/dependabot.yml

@@ -0,0 +1,33 @@
+version: 2
+
+updates:
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+    groups:
+      # Bundle all vitest-related updates into one PR
+      vitest:
+        patterns:
+          - "vitest"
+          - "@vitest/*"
+      # Bundle all vite/plugin updates into one PR
+      vite:
+        patterns:
+          - "vite"
+          - "@vitejs/*"
+          - "@tailwindcss/vite"
+      # Bundle all React updates into one PR
+      react:
+        patterns:
+          - "react"
+          - "react-dom"
+          - "@types/react"
+          - "@types/react-dom"
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday

.github/pull_request_template.md

@@ -0,0 +1,13 @@
+## Summary
+
+<!-- What does this PR do and why? -->
+
+## Test plan
+
+- [ ] `pnpm vitest run` passes (67+ tests)
+- [ ] `pnpm lint --max-warnings 0` passes
+- [ ] Tested in browser locally (`pnpm dev`)
+
+## Notes
+
+<!-- Anything reviewers should know: trade-offs, follow-ups, etc. Leave blank if not applicable. -->

.github/workflows/release.yml

@@ -0,0 +1,25 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+
+jobs:
+  release:
+    name: Create GitHub Release
+    runs-on: ubuntu-latest
+    env:
+      FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
+    permissions:
+      contents: write
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Create release
+        uses: softprops/action-gh-release@v2
+        with:
+          generate_release_notes: true
+          make_latest: true