CI-1108: Add cooldown to Dependabot to mitigate supply-chain attacks

Add a 7-day cooldown period before Dependabot updates dependencies.
This helps protect against supply-chain attacks by ensuring new package
versions have time to be vetted by the community before adoption.

Co-Authored-By: opencode <noreply@opencode.ai>

Author: timdittler

.github/dependabot.yml

@@ -6,6 +6,8 @@ updates:
       interval: "daily"
       time: "08:00"
       timezone: "Europe/Berlin"
+    cooldown:
+      default-days: 7
     target-branch: "main"
     open-pull-requests-limit: 10
     labels:
@@ -28,6 +30,8 @@ updates:
       interval: "daily"
       time: "08:00"
       timezone: "Europe/Berlin"
+    cooldown:
+      default-days: 7
     target-branch: "main"
     open-pull-requests-limit: 10
     labels: