codeSplitters dependency doctor: alert the owner when a dependency is exposed, and run it on RustyBuns' own deps #615

The doctor now flags dependencies with known vulnerabilities (fixed → moved to the fix, no fix → "exposed"), but you only see that on the repo page.

• Alert: when a run finds a new exposed dependency or opens a branch with security fixes, tell the owner (email via Cloudflare Email Service, or a push on the desktop). Only on change, not every run.
• Dogfood: point the doctor at the RustyBuns repo itself on a schedule (mirror on codeSplitters, or a GitHub Actions cron that runs the same outdated() + OSV check and opens a PR), so our own deps stay current and safe without anyone thinking about it.

🤖 Generated with Claude Code