- Add package-lock.json for reproducible builds (npm ci)
- Add dependabot.yml for npm and GitHub Actions updates
- Add .gitignore for node_modules and generated PDF
- Update workflow to use npm ci with caching
- Improve PDF script with proper error handling and HTTP server
