Add dependency submission

[bioball]

This adds jobs to add Gradle dependencies to GitHub's dependency submission API, and to review when these dependencies change.

[HT154]

Approving to unblock, but a couple small things

[HT154]

Probably best to pull this out somewhere so it's not in multiple places in our GHA configs

[bioball]

I can't think of an easy place to put this off the bat, so I'm just going to keep this as-is. Maybe we can refactor things, but I'll consider this as out-of-scope for now.

[HT154]

This is a little awkward. Can toWorkflowJobs just pass Workflow.Job instances through instead?

[bioball]

Good idea!

[HT154]

Looks like dependency submission needs

permissions:
  contents: write

Do we really need to be doing this on PRs?

[bioball]

I have contents: write set on the job level, but it looks like it needs to be on the workflow level in order for it to work.

The goal was to have dependency changes reviewed by dependency-review-action, but I think we can try tackling that later (if at all). I'll remove that from the PRB builds.