Ensure that Dependabot PRs are checked against the action allow list

[sbp]

As per #591 (comment).

[dave2wave]

1. approved_patterns.yml
2. Allowlist Manager

[dave2wave]

approved actions - this shows which of the actions versions are approved.

[sebbASF]

Note that 'Analyze using pre-commit hooks' detects this:

https://github.com/apache/tooling-trusted-releases/actions/runs/21375629664

However, it is probably overkill, and could probably be simplified for Dependabot

[dave2wave]

If you look at the checks tab for the PR the error with the precommit workflow is shown, but appears in black in the success ring and the results are hidden. This is a GitHub UX issue or a configuration issue.

[dave2wave]

I've asked on slack: https://the-asf.slack.com/archives/C07AR981W94/p1769791883907769

[dave2wave]

This looks a GitHub issue: I have made a comment in a GH discussion

[dave2wave]

Closing. We will notice if GH ever fixes this issue.