Keep GitHub Actions up to date with GitHub's Dependabot

[cclauss]

Automation that fixes software supply chain warnings like at the bottom right of

🤖 Sync org-wide files to upstream repo

• Keeping your actions up to date with Dependabot - GitHub Docs
• Configuration options for the dependabot.yml file - GitHub Docs