ci(deps): group codeql-action sub-action updates in dependabot (#2814)

github/codeql-action/{init,analyze,autobuild,upload-sarif} are released in
lockstep from one repo but land as separate dependabot PRs. Group them so
each bump opens a single PR.

Author: madhavilosetty-intel

.github/dependabot.yml

@@ -10,6 +10,11 @@ updates:
     directory: /
     schedule:
       interval: daily
+    # codeql-action's sub-actions release in lockstep; one PR instead of four.
+    groups:
+      codeql-action:
+        patterns:
+          - 'github/codeql-action*'
 
   - package-ecosystem: docker
     directory: /