Add a dependabot configuration to automatically update to new workflow tags

swift-collecton is pinning the tag of github-workflows, to prevent destabilizing changes. We should have an automation that creates a PR to update this tag whenever there is a new tag available.