Add dependabot flows

[gssbzn]

Add dependabot to the repo to keep dependencies up to date, in particular this comes as the version included in the go.mod for testify is flagged to have security issues via a transitive dependency on yaml.v2