dependency-compatibility-policy

Dependency policy: latest-compatible, source-backed, SLSA Level 2, SBOM, lockfile discipline. Use for: dependencies, versions, package updates, version migration, compatibility, supply-chain. Triggers: bump dependencies, package version policy, latest-compatible, lockfile discipline, supply chain check, SLSA Level 2, SBOM.