Reject apps without frappe dependency in pyproject

GitHub app validation now rejects pyproject.toml without a frappe key; broken dependency declarations are caught early.