chore: opt into grouped dependabot merges

merge was false, so merge-deps could only ever triage and report. What a
merge actually rests on here is the verify gate, not CI — a Dependabot PR
into an integration branch often triggers nothing relevant — and this
repo's gate covers it. Grouped minor+patch updates may now merge on the
standing opt-in; majors still wait for a human, since confirm defaults to
"major".

Drops verify, confirm and cap from the block. All three restated a
default: mergeDeps.verify falls back to the root verify key and was
byte-identical to it, confirm defaults to "major", cap to 5. A restated
default carries no information and can only drift away from the thing it
copied.

Author: TitusKirch

.tituskirch-skills.json

@@ -29,10 +29,7 @@
     "timeout": 600
   },
   "mergeDeps": {
-    "merge": false,
-    "confirm": "major",
-    "verify": "pnpm check",
-    "cap": 5
+    "merge": "grouped"
   },
   "pruneBranches": {
     "age": 90,