add dependabot checking

[wrigjl]

dependabot is an automated tool for checking package dependencies. It can check for package updates and recommend updates from upstream packages we depend on. The Redux repo just added a dep checker.