fix: workflow cleanup and security overrides on master

- Remove non-existent 'develop' branch from CodeQL and dependency-review triggers
- Fix invalid template expression in dependabot.yml assignees (use literal username)
- Add npm overrides for pbkdf2 and sha.js security patches

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.github/dependabot.yml

@@ -43,7 +43,7 @@ updates:
 
     # Assignees
     assignees:
-      - "${{ github.repository_owner }}"
+      - "mkilijanek"
 
     # Reviewers (customize as needed)
     # reviewers:

.github/workflows/codeql-analysis.yml

@@ -5,12 +5,10 @@ on:
     branches:
       - main
       - master
-      - develop
   pull_request:
     branches:
       - main
       - master
-      - develop
   schedule:
     # Run at 4 AM UTC every Monday
     - cron: '0 4 * * 1'

.github/workflows/dependency-review.yml

@@ -5,7 +5,6 @@ on:
     branches:
       - main
       - master
-      - develop
     paths:
       - 'package.json'
       - 'package-lock.json'

package.json

@@ -213,6 +213,10 @@
     "security:triage:json": "node scripts/vulnerability-triage.js --json",
     "security:check": "npm run security:triage && npm run lint"
   },
+  "overrides": {
+    "pbkdf2": "^3.1.5",
+    "sha.js": "^2.4.12"
+  },
   "engines": {
     "node": ">=24"
   }