Scan workflows for unpinned GitHub Actions.

[Tatsinnit]

Intention behind this PR is as follows:

Enable depdneabot for following

1. Checks for Updates:

   • Dependabot scans GitHub Actions workflows (e.g., .github/workflows/*.yml).
   • Identifies actions that need updating (e.g., actions/setup-go@v5 → latest SHA).

2. Creates PRs for Updates:

   • It replaces outdated versions with the latest commit SHA.
   • Adds a "dependencies" label to PRs for easy identification.

3. Runs on a Weekly Schedule:

   • Dependabot checks for new versions once a week.

Thanks heaps and FYI: @davidgamero ❤️ lets merge this #487 and then we can get this in for all resolving from next week onwards, thanks heaps

[Copilot]

Copilot reviewed 1 out of 1 changed files in this pull request and generated no comments.

[Vidya2606]

lgtm

[davidgamero]

lgtm