chore: Add Dependabot version-update cooldown (#119)

This pull request was auto generated by the LaunchDarkly Github
Standards automation platform.

* Ensure every entry under `updates` in `.github/dependabot.yml`
declares a cooldown of at least 7 days (default-days).
* Add entries for detected package ecosystems that were not yet tracked
by Dependabot.

Cooldown applies only to version updates; security updates bypass it, so
critical CVE fixes are never delayed.

Ref: SEC-8058.

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> CI/dependency automation only; no application runtime or security
logic changes.
> 
> **Overview**
> Introduces **`.github/dependabot.yml`** so Dependabot tracks **GitHub
Actions** and **Go modules** at the repo root on a **weekly** schedule.
> 
> Each ecosystem sets **`cooldown.default-days: 7`**, spacing routine
version bumps; **security updates are not delayed** by this cooldown
(per Dependabot behavior).
> 
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
cd767d3. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Co-authored-by: ld-repository-standards[bot] <113625520+ld-repository-standards[bot]@users.noreply.github.com>

Author: ld-repository-standards[bot]

.github/dependabot.yml

@@ -0,0 +1,14 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7