Add automated npm dependency updates + audit in CI

### Description:
Dependencies are getting outdated and show vulnerabilities when running npm audit. We should automate updates (Renovate/Dependabot) and add an audit step in CI that alerts or fails on high/critical issues.

### Expected:
- Automated PRs for npm updates
- CI audit step detecting vulnerabilities
- Reduced dependency/security debt