Turn on Github dependabot

[clavedeluna]

To stay on top of dependency changes and security updates, we should turn on dependabot on this repo just like the other carpoolear repo. This must be done by maintainers or contributors with sufficient Github permissions to update the repo.

Help on how to enable it is here

I'm certain there will be dependency updates that we won't be able to update immediately because they would break everything. As such, it's imperative this issue isn't completed until Github Actions / CI testing is enabled.