chore(dependencies): have automation for dependnecy updates

[jkowalleck]

Enable a bot that opens pullrequests for dependnecy updates.

Candidates:

• dependabot: https://docs.github.com/en/code-security/tutorials/secure-your-dependencies/dependabot-quickstart-guide
• renovate: https://docs.renovatebot.com/

requireemnts:

• bot uses a cooldown-period: 7 to 14 days
  • dependabot: https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#cooldown-
  • renovate: https://docs.renovatebot.com/key-concepts/minimum-release-age/
• bot scans/bumps all GH workflow actions
• bot notifies for new versions of package dependencies
• to be continued ...