Repository and CI/CD hygiene

[JoLo90]

Here are some improvements we could implement to improve the library's maintenance and code quality.

• add a dependabot workflow for scanning the dependencies and inform about vulnerabilities
• add pre-commit hooks (ruff, black, isort, commitizen), we could deprecate flake8, which is slow
• automated version update and git tags creation based on commit prefixes with commitizen.

[echedey-ls]

add a dependabot workflow for scanning the dependencies and inform about vulnerabilities

Do you think vulnerabilities are a key threat to pvlib's development? I knew of dependabot but I'm very hesitant to think that pvlib is subject to much improvement from it. Most of the time we prioritize working with older versions to support old setups. It has it pros and its cons, obviously.

add pre-commit hooks (ruff, black, isort, commitizen), we could deprecate flake8, which is slow

Related conversation at #2642

[JoLo90]

Besides the requests library (I am not sure if it is PVLib's job to fetch data from the internet), I don't think the other libraries are subject to any vulnerability.
I agree with #2642, we should maybe switch to ruff where the config would sit in pyproject.toml.