Add boto3 dependency to dependabot configuration

[Maffooch]

We are approving a boto3 rev almost every single day at this point. Let's skip the patches and only focus on the minor revs

[dryrunsecurity]

This pull request includes a Dependabot config that restricts updates for the boto3 package to semver-minor only, which can prevent automatic PRs for major releases and may cause critical security fixes released in a new major version to be missed. Consider allowing major updates for boto3 or adding a process to monitor and handle major-version security fixes.

Risk of Missing Security Patches in Major Version Updates in .github/dependabot.yml

Vulnerability	Risk of Missing Security Patches in Major Version Updates
Description	The Dependabot configuration for the boto3 package is restricted to only semver-minor updates. This prevents Dependabot from automatically creating pull requests for major version updates. If a critical security vulnerability is fixed only in a new major version of boto3, this configuration will cause the security alert and fix to be missed, leaving the project vulnerable.

django-DefectDojo/.github/dependabot.yml

Lines 15 to 18 in 80a60e2

	update-types: ["version-update:semver-minor"]
	- package-ecosystem: npm
	directory: "/components"
	schedule:

---

All finding details can be found in the DryRun Security Dashboard.

[mtesauro]

Approved