CI: add dependabot configuration

[pjonsson]

This adds configuration for getting automatic pull requests for version updates for github actions.

https://docs.github.com/en/code-security/dependabot