Configure dependabot for github-actions

[jorenham]

With this, dependabot will create a PR if one of the workflow actions is outdated.

See also: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#github-actions