Drop permissions/cred persistence, add a Dependabot config

Signed-off-by: William Woodruff <william@yossarian.net>

Author: woodruffw

.github/dependabot.yml

@@ -0,0 +1,12 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    cooldown:
+      default-days: 7
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      github-actions:
+        patterns:
+          - "*"

.github/workflows/build.yml

@@ -12,13 +12,16 @@ env:
   PIP_VERBOSE: true
   PYMSBUILD_VERBOSE: true
 
+permissions: {}
 
 jobs:
   build:
     runs-on: windows-latest
 
     steps:
     - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      with:
+        persist-credentials: false
 
     - name: 'Remove existing PyManager install'
       run: |