Added dependabot for GitHub Actions

[ydah]

How about using dependabot in this way? When this works, a PullRequest is created as follows:

• https://github.com/ruby/bigdecimal/pull/242

Same as the PR here: https://github.com/rubocop/rubocop/pull/11215