Introduce dependabot

[ascheman]

As a maintainer of HSC I would like to update dependencies frequently in order to gain secure binaries. Frequent updates makes patching in critical situations (vulnerability which needs hot fix) usually way simpler as security fixes are very often only applied to the latest versions of a library.