Establish how to manage dependabot PRs:

• what manual tests/checks?

• should we routinely rebase?

• what do we do with failing PR builds?

This might be best to cover in the Dev Handbook.

Change the dependabot config: don’t auto-rebase (Existing dependabot Tech Improvement)

• ESR to start with .(small subtask)

Move nightly jobs away from Jenkins/build server i.e. ECS

[Unrelated] Check Elastic Search snapshots are configured as needed: Maintenance windows avoid Sync job on stage and Prod (small subtask)