Revisit dependabot configuration

[davemcorwin]

User Story

The current dependabot workflow is time-consuming and noisy. Revisit the configuration for ALL our repos

Acceptance Criteria

• [ ] Dependabot raises security issues immediately
• [ ] Dependabot does not create PRs for dependency updates
• [ ] A monthly process runs for dependency updates via CircleCI/Github Actions
• [ ] Repeat for all repos
• [ ] Change made live via <TODO>.

Level of effort - medium

Implementation outline (if higher than "low" effort):

• [ ] <TODO>

Example similar GH Actions https://github.com/Homebrew/homebrew-cask-fonts/blob/master/.github/workflows/google-fonts.yml