`list_dependabot_alerts` always fails with HTTP 400 — tool hardcodes `page`/`per_page`, but the Dependabot alerts endpoint requires cursor pagination #3838