add workflow to auto-merge dependabot PRs