Create major upgrade cards for engineers before sprint

Your bot dependency pull requests land unlabeled in the repo, causing missed major-version security upgrades and delayed planning. Engineers and product managers receive prioritized upgrade cards to plan fixes before the next sprint.