CI: Add Dependabot cooldown for github-actions updates

The github-security-report security scan flags the github-actions
ecosystem for a missing update cooldown, which is mandatory (any value
passes) and also required by the zizmor workflow auditor. Add a 7-day
default cooldown, matching the global-jjb configuration, so bump PRs
wait before opening on a freshly shipped action release.

Change-Id: Ic86da031bb8ae78bfd13a7ec5ee8fec77bc79f91
Signed-off-by: Anil Belur <abelur@linuxfoundation.org>

Author: askb

.github/dependabot.yml

@@ -13,6 +13,8 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+    cooldown:
+      default-days: 7
     groups:
       actions-deps:
         patterns: