Add Dependabot and hash-pin GHA (#17) #86

Job	Run time
Frontend Lint & Typecheck	30s
Backend tests	37s
Check backend lockfile is up to date	-1s
	1m 6s

Provide feedback