chore: add dependabot.yml

Enables weekly version bump PRs (minor + patch grouped, majors separate)
across all ecosystems present in the repo. Limit 5 open PRs per ecosystem.

Closes opendecree/decree#148

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: zeevdr

.github/dependabot.yml

@@ -0,0 +1,31 @@
+version: 2
+updates:
+  - package-ecosystem: pip
+    directories:
+      - /sdk
+      - /examples
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
+      - ci
+    groups:
+      minor-and-patch:
+        update-types:
+          - minor
+          - patch
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
+      - ci
+    groups:
+      minor-and-patch:
+        update-types:
+          - minor
+          - patch