chore(deps): ignore major-version bumps for pytest + pytest-asyncio

[mikemolinet]

Summary

Test-infra dev deps; major-version bumps break the test suite without engineer-side fix work, and there's no urgency to upgrade. Decision per Mike 2026-05-06 after #38 (pytest 8→9) and #40 (pytest-asyncio 0.24→1.3) surfaced as failing CI on previously-stuck Dependabot batch.

Adds ignore rules in .github/dependabot.yml for these two packages, scoped to version-update:semver-major only. Minor + patch bumps continue flowing through the existing python-minor-patch group.

Test plan

• Config-only PR; no test coverage needed
• Verified syntax matches the existing block format
• Reviewed the GitHub Dependabot ignore-rules docs

Parity impact

This change ships to:

• cueapi-core (open-source mirror) — direct change, this is the source repo
• cueapi (hosted) — could mirror the same pin if Mike's hosted-side test suite hits the same incompatibility, but current scope is cueapi-core only

Parity notes

config-only — no parity port needed.

---

🤖 Authored by cue-pm-pr-watcher under Mike's directive 2026-05-06 to defer the failing major-version bumps in cueapi-core's Dep batch.

Closes #38, #40 (will close as superseded once this lands).

[mikemolinet]

Superseded by #51 — cueapi engineer found a 9-line pytest.ini fix (pin asyncio_default_fixture_loop_scope=function) that unblocks the actual upgrade. That's strictly better than this skip-via-pin approach, which would have left us perpetually behind on pytest/pytest-asyncio. Closing this as the wrong path now that the right one's known.

Sequence after #51 merges:

1. chore(deps): bump pytest-asyncio from 0.24.0 to 1.3.0 #40 (pytest-asyncio 1.3.0) rebases against new pytest.ini → tests pass → merges
2. chore(deps): bump pytest from 8.3.0 to 9.0.3 #38 (pytest 9.0.3) cascades naturally — pytest-asyncio 1.3.0 supports pytest>=8.2 (including 9.x), unblocking the install constraint.

Branch chore/dependabot-ignore-pytest-major can be deleted.