Dependabot keeps trying to update packages/shared-fvtt-bits which is a huge pain.

[n3dst4]

See dependabot/dependabot-core#4364

Because packages/shared-fvtt-bits is a subrepo, having automated updates to it will cause issues down the line.
It's been okay so far because INVESTIGATOR was the only real consumer and so it usually tracked latest shared and we could push changes back up to the shared repo. But as more projects use it, we will want some of them to stay on older versions of shared while they go through phases of low maintenance, and it will be a huge pain if they start creating their own wee updates to it.