dependabot-script does not support the `lockfile-only` versioning strategy

[jeffwidman]

See https://github.com/dependabot/dependabot-core/pull/4820#issuecomment-1072597691 and follow-on comments.

Filing an issue here so we don't lose track...