add dependabot.yml

[misaka]

Found that I needed to add this to a project after creating it with this template. I think it would make sense to automatically include this configuration file by default.