Add dependabot to repository

## Summary

Context: given that we have recently shifted to list exact versions of dependencies in `requirements.txt`, we need a way to bump the versions of dependencies we are using

* Set up dependabot for this repository