Dependency update risk, right on the ticket

The scenario finds dependency-update tickets, scores the risk with AI, and posts the verdict as a ticket comment, logging a record to a sheet.