[cryptodev-2s]

Explanation

Adds a reusable workflow that posts a Monday Slack thread of open Dependabot PRs grouped by owning team (WPC-1462). core and metamask-extension each call it from their own cron.

• Owners are the teams still requested as reviewers. owner-teams limits which teams count (extension: extension-platform).
• PRs with failing CI, PRs approved with no owner left, and PRs with no owner go under fallback-team (default core-platform).
• Slack handles come from MetaMask-planning/topology.json. A team with no match shows as plain text.
• Nothing is posted when no PRs are open.

---

Note

Low Risk
Automation-only change with read GitHub permissions and outbound Slack webhooks; no application runtime or data-store changes.

Overview
Adds a reusable GitHub Actions workflow and composite action that scan open Dependabot pull requests, bucket them by requested reviewer team (with fallback sections for failing CI, ready-to-merge, and unowned PRs), resolve Slack subteam mentions via MetaMask-planning/topology.json, and post a webhook message when any PRs remain.

New Node (.mts) tooling under .github/scripts/dependabot-pr-reminder/ combines GraphQL and REST gh api calls, optional owner-teams filtering, payload chunking for Slack limits, and unit tests. The README documents caller setup (cron, permissions, TOKEN_EXCHANGE_URL, secrets).

^{Reviewed by Cursor Bugbot for commit 2280df2. Bugbot is set up for automated code reviews on this repo. Configure here.}