chore(ci): add dependabot configuration for GitHub Actions

[buke]

Module Submission / Update

Description:

Checklist

Please confirm the following before submitting your PR (refer to CONTRIBUTING.md / 中文指南 for guidance):

• Ownership Declaration: I declare that I am the owner of this NPM package, or I have explicit authorization to list it in the Choysum ecosystem.
• Published: My package has been successfully published to the npm registry and is currently discoverable.
• Correct Format: The *.json file structure strictly follows schemas/catalog-entry.schema.json (contains only package, trust, and maintainers; no redundant data like version numbers).
• Tier Alignment: The JSON file is placed under the matching directory tier (official / verified / community).
• Identifier Consistency: The JSON file name (i.e. moduleName) matches the choysum.moduleName specified in the npm metadata.

[gemini-code-assist]

Code Review

This pull request adds a Dependabot configuration file (.github/dependabot.yml) to enable weekly updates for GitHub Actions. There are no review comments, and I have no additional feedback to provide.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.