.github: add dependabot config

Add basic dependabot config to check for actions / npm updates daily.
This mirrors the config we currently have in the terraform provider repo
but with go swapped for npm.

Fixes https://github.com/tailscale/github-action/issues/207

Signed-off-by: Mario Minardi <mario@tailscale.com>