ci: reduce dependency update cadence (#1916)

Run npm Dependabot weekly and custom dependency updaters twice monthly to reduce automation PR churn while keeping daily vulnerability scanning unchanged.