Update dependabot.yml with cooldown

[daveroge]

This pull request makes a small configuration change to the .github/dependabot.yml file, introducing a cooldown period for Dependabot updates.

• Added a cooldown setting with default-days: 7 to both the gomod and gha update configurations, which will limit the frequency of new pull requests for these dependencies. [1] [2]

[Copilot]

Pull request overview

This PR updates the repository’s Dependabot configuration to reduce the frequency of dependency update pull requests by introducing a cooldown window for Go modules and GitHub Actions updates.

Changes:

• Added a cooldown block with default-days: 7 to the gomod update configuration.
• Added a cooldown block with default-days: 7 to the github-actions update configuration.

[Copilot]

cooldown / default-days is not a recognized key in the Dependabot v2 configuration schema (unknown keys can cause Dependabot to reject the whole config and stop creating PRs). If the intent is to reduce PR frequency, consider switching schedule.interval to weekly (optionally with day, time, timezone) or using groups/ignore rules instead of cooldown.

[Copilot]

Same as above: cooldown / default-days is not part of the Dependabot v2 config schema and may prevent Dependabot from processing this file. Prefer adjusting schedule.interval (e.g., weekly) and/or using groups/ignore to control PR volume.