run dependabot PR's againt `staging`

[bourgeoa]

I seems that dependabot security patch MUST run on the default branch. In our case main

https://stackoverflow.com/questions/67081824/is-it-possible-to-select-a-specific-branch-against-which-dependabot-should-open