dependabot.yml should be in .github/workflows

[ericwb]

Describe the bug

The dependabot.yml file should be in the .github/workflows directory in order to be picked up as a workflow action. Right now I believe it is being ignored.

Reproduction steps

1. Notice file .github/dependabot.yml
2. Click on Actions in the bandit repo and notice it is not there.

Expected behavior

Any workflow action should be visible in the Actions tab of the repo.

Bandit version

1.7.5 (Default)

Python version

3.11 (Default)

Additional context

No response