FixBeacon: dependency scans that stay close to the repo

If you maintain real services, "we have Dependabot" is not the whole story. You still end up bouncing...