Introduces .github/dependabot.yml to automate dependency updates for npm packages and GitHub Actions. Sets weekly update schedule, groups related dependencies, and assigns/reviews PRs to xixu-me.
