OG-RMM Platform: 100% production readiness — remove ALL simulated fallbacks, secure ALL endpoints

.github/dependabot.yml

@@ -0,0 +1,28 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: "/"
+    schedule:
+      interval: weekly
+      day: monday
+      time: "09:00"
+      timezone: Asia/Dubai
+    open-pull-requests-limit: 5
+    groups:
+      radix-ui:
+        patterns:
+          - "@radix-ui/*"
+      trpc:
+        patterns:
+          - "@trpc/*"
+      drizzle:
+        patterns:
+          - "drizzle-*"
+    ignore:
+      - dependency-name: "*"
+        update-types: ["version-update:semver-major"]
+
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: monthly

.github/pull_request_template.md

@@ -0,0 +1,30 @@
+## Summary
+
+<!-- Brief description of what this PR changes -->
+
+## Type of Change
+
+- [ ] Bug fix
+- [ ] New feature
+- [ ] Breaking change
+- [ ] Documentation update
+- [ ] Refactor / code quality
+
+## Checklist
+
+- [ ] `pnpm test` passes (Vitest: 11/11)
+- [ ] `npx tsc --noEmit` shows 0 errors
+- [ ] New tRPC procedures have input validation (Zod)
+- [ ] DB schema changes have a migration (`pnpm db:push`)
+- [ ] New pages are registered in `App.tsx` and `DashboardLayout.tsx`
+- [ ] No `console.log` stubs left in production paths
+- [ ] No mock data used as primary data source (only as fallback when DB is empty)
+- [ ] Sensitive operations use `protectedProcedure` or `adminProcedure`
+
+## Testing
+
+<!-- Describe how you tested this change -->
+
+## Screenshots (if UI change)
+
+<!-- Add before/after screenshots if applicable -->