add dependabot configuration

[wwuck]

This PR adds a dependabot configuration to keep python dependencies and GitHub actions up to date.

You can read more about this feature at https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/about-dependabot-version-updates.

GitHub also provides a feature to get security update PRs via dependabot: https://docs.github.com/en/code-security/supply-chain-security/managing-vulnerabilities-in-your-projects-dependencies/about-managing-vulnerable-dependencies

[mbaak]

Hi @wwuck, can you rebase this PR to the master branch? That should fix the ubuntu wheels check. Thanks!

[wwuck]

I'm not sure what happened to my fork repository here, but I've filed a new PR for this