build(release): UPX Linux envc binaries and trim link metadata

Use GoReleaser UPX (linux only, best+lzma), install upx-ucl in the tag release workflow, and add -buildvcs=false with empty -buildid=. Stop Dependabot auto bump PRs via open-pull-requests-limit 0. Remove stray LibreOffice lock file under docs.

Co-authored-by: Cursor <cursoragent@cursor.com>

.github/dependabot.yml

@@ -8,7 +8,7 @@ updates:
       day: monday
       time: "06:00"
       timezone: Etc/UTC
-    open-pull-requests-limit: 10
+    open-pull-requests-limit: 0
     commit-message:
       prefix: "chore(deps)"
       include: scope
@@ -29,7 +29,7 @@ updates:
       day: monday
       time: "06:00"
       timezone: Etc/UTC
-    open-pull-requests-limit: 5
+    open-pull-requests-limit: 0
     commit-message:
       prefix: "ci(actions)"
       include: scope

.github/workflows/release.yml

@@ -22,6 +22,12 @@ jobs:
           go-version: stable
           cache: true
 
+      - name: Install UPX
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y upx-ucl
+          upx --version
+
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v6
         with: