Ensure third-party GitHub Actions are updated with Dependabot

Apply the following config in all repos (even if they don't have a workflow yet):

  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
    commit-message:
      prefix: "ci(deps): "

Part of #872.

Provide feedback