Update github actions + introduce dependabot

[de-jcup]

1. Update github actions (checkout + setup-java)
2. Introduce dependabot github action (see https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/automating-dependabot-with-github-actions)