dependabot: use more groups.

- update all dependabot types once a week on Friday so they can make it
  into the new release on (usually) Monday
- use dependabot groups for all changes so we can merge them all at once
- use the `directories` option to DRY things up