Alert engineering leads of dependabot PRs before sprint

Your dependabot PRs land untriaged in the repo, causing security drift and missed triage. Engineering leads receive prioritized tickets so fixes are scheduled before the next sprint.