Group Dependabot PRs

By default, dependabot does a new PR for each individual package update. This is frustrating to manage and litters the git history and explodes the issue and PR numbers.

They can be grouped into one. See here for an example https://github.com/ImperialCollegeLondon/MEDUSA/pull/176