feat(npm-audit): Add automerge workflow for npm-audit-fix

[nickvergessen]

🤖 AI (if applicable)

• The content of this PR was partly or fully generated using AI (N/A)

[susnux]

should we merge this into one workflow (maybe separate steps)?

[nickvergessen]

Same question applies to nextcloud/ocp updates I guess.
Not sure why it was not done in first place. Can imagine few reasons:

• Copied from dependabot (can not merge files and simply copied over)
• Did not work in the past (auto-merge github action on a github actioned PR, I think it rings a bell)
• Could be "annoying" if someone wants to not automerge (but we could have an easy opt-out with a patch file)

[susnux]

Copied from dependabot (can not merge files and simply copied over)

I guess thats the reason

[susnux]

Ok for me, but I think its better maintainable as one workflow with opt-out with a patch.
otherwise you loose track of all the workflows at some point.

[nickvergessen]

I think its better maintainable as one workflow with opt-out with a patch.
otherwise you loose track of all the workflows at some point.

Done that now. Will give it a test in an app

[nickvergessen]

Successful run in nextcloud/upload_monitor#164