Add dependency submission workflow so we can monitor vulnerabilities

[lbergelson]

@droazen This submits our dependencies so that dependabot can analyze them in the background.

It's from https://github.com/marketplace/actions/build-with-gradle#the-dependency-submission-action