Update app's Chaptic uses

[JustLuuuu]

• review all apps Chaotic uses
• check if they are up to date
• remove the ones that we dont use
• consider adding new ones to improve processes

[kylymo]

I broke the audit into six linked sub-issues:

• Align CI Node.js and pnpm runtime versions #894 — Align CI Node.js and pnpm runtime versions
• Review and improve Dependabot update strategy #895 — Review and improve Dependabot update strategy
• Harden GitHub Actions permissions and pinning #896 — Harden GitHub Actions permissions and pinning
• Protect the main branch with required review and CI #897 — Protect the main branch with required review and CI
• Evaluate secret scanning and code scanning #898 — Evaluate secret scanning and code scanning
• Inventory and review organization GitHub Apps #899 — Inventory and review organization GitHub Apps

The sub-issues include this issue as the parent in their bodies. The organization-level App inventory (#899) requires organization owner/admin access because repository-level permissions cannot enumerate all organization installations.