Add dependabot

Hi,

it would be cool if you used dependabot, as it can create pull requests for base image updates and removes some work that otherwise you (or contributors) have to do manually.
This ensures that security is held up by using the newest patched base images.

best,
applike-ss