Added dependabot for GitHub Actions

[ydah]

How about using dependabot in this way? When this works, a PullRequest is created as follows:

• ruby/bigdecimal#242

It was created with reference to the following:

• ruby/csv#265