Enable dependabot for docker and github-action updates

[marten-seemann]

@larseggert What's the motivation for this PR?

[larseggert]

I'm starting to play with the image again for neqo and realized it's pretty outdated.