enable dependabot for GitHub actions

[ranocha]

This allows to get updates for GitHub actions automatically. I have used this for my own packages, the Trixi.jl framework, and the SciML organization. After merging this, you could also enable other Dependabot actions in 'Settings -> Code security and analysis -> Dependabot alerts' and '... -> Dependabot security updates'.

See https://github.com/SciML/MuladdMacro.jl/pull/37

[codecov[bot]]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Comparison is base (1b04ffc) 97.67% compared to head (91df98e) 97.67%.

:exclamation: Current head 91df98e differs from pull request most recent head 320dfef. Consider uploading reports for the commit 320dfef to get more accurate results

Additional details and impacted files

@@           Coverage Diff           @@
##           master      #51   +/-   ##
=======================================
  Coverage   97.67%   97.67%           
=======================================
  Files           1        1           
  Lines          43       43           
=======================================
  Hits           42       42           
  Misses          1        1           

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.