Setup dependabot for github actions (and more?)

[greg0ire]

Here is an example on how to do so: https://github.com/doctrine/collections/blob/2.2.x/.github/dependabot.yml