set up weekly checks for npm and GitHub actions - ignore patch level for npm

[brothhammer]

Brief Description

I didn't find the controls I was expecting through the GitHub GUI so this file sets up weekly dependabot runs for NPM and GitHub Actions

JIRA Link

I'm off script here

Related Issue

Follow up to this card:
https://rocketcom.atlassian.net/browse/AP-354

General Notes

If someone else has better knowledge of dependabot and knows it is working like we want this can be closed.

Motivation and Context

A dependabot.yml file is self documenting so any developer can sort out what to expect from dependabot without high level access to the repository

Issues and Limitations

Types of changes

• Developer feature

[changeset-bot]

⚠️ No Changeset found

Latest commit: b6efb40

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[netlify]

✅ Deploy Preview for astro-stencil canceled.

Name	Link
🔨 Latest commit	b6efb40
🔍 Latest deploy log	https://app.netlify.com/sites/astro-stencil/deploys/67ddcfea786b7f0007f01189

[netlify]

✅ Deploy Preview for astro-preview canceled.

Name	Link
🔨 Latest commit	b6efb40
🔍 Latest deploy log	https://app.netlify.com/sites/astro-preview/deploys/67ddcfeabc11020008ffd70e