enable GitHub Dependabot

[rursprung]

this ensures that the dependencies are kept up to date. see the docs for further information.

note: changelog intentionally left away as this only touches the build infrastructure and has no direct impact on consumers of the library.