As the title says. Let's add a dependabot GitHub action to automatically re-generate go.mod.
Otherwise we probably will have to fix them up ourselves, like e.g. in #2441
Example implementation: https://github.com/kubernetes-sigs/cluster-api/blob/main/.github/workflows/pr-dependabot.yaml