Dependabot configuration for maintenance of dependencies

[sbrugman]

Dependabot might need a click or two to activate, but will help keep the base and dev dependencies up-to-date without much effort.

Alternatives such as renovate bot are available. No strong preference from my side, just that dependabot is part of the GitHub offering makes it a practical choice.