Add dependabot config to check for updates for GHA workflows. (#10342)
This will automatically create PRs to update any GitHub Actions we are
using when new versions are published. It is set to check weekly,
defaults to limiting such PRs to 3 at a time, and will lable them
apprpriately with ‘no changelog’ and ‘area/ci’.
This is intended to reduce the manual overhead of maintaining our CI.