Merge pull request #40 from simplify9/hamza/feature/audit-options

feat: let CapturePendingAuditDiffs filter entities and properties

chore(dependabot): raise semver-patch cooldown to 5 days (#34)

Patch is the only update class that auto-merges with no human
involved, yet carried the shortest cooldown (1 day, a third of
GitHub's 3-day default). Soak time should scale with how little
scrutiny a bump receives, not with how breaking semver claims it is.

Costs nothing in security terms: cooldown never applies to Dependabot
security updates, which still fire immediately.

Propagated from simplify9/.github (dependabot-templates).

fix: scope dependabot-auto-merge's critical-vuln-gate check to main-b…

…ound PRs only

fix: use pull_request_target so vuln-gate/auto-merge work on real Dep…

…endabot PRs

chore: add Dependabot configuration and critical-vuln gate (#16)

Co-authored-by: dependabot-rollout-bot <devops@simplify9.com>

Update nuget-publish.yml

Add documentation for audit trail feature in AUDIT.md

Merge pull request #14 from simplify9/muhannad/nuget-upgrade

upgrade package references for Newtonsoft.Json, SimplyWorks.Primitive…

update pipeline file

github action and docs update