ci: add a dependabot configuration 

Since this repository is using GitHub actions, nom and gem, it should have a dependabot configuration for the 3 package managers.
Npm should have a group for the vitest deps.
Lastly, we could also bring the auto merge workflow