add dependabot

.github/dependabot.yml

@@ -0,0 +1,65 @@
+version: 2
+registries:
+  public-nuget:
+    type: nuget-feed
+    url: https://api.nuget.org/v3/index.json
+updates:
+  - package-ecosystem: nuget
+    directory: "/"
+    registries:
+      - public-nuget
+    schedule:
+      interval: daily
+      time: "07:00"
+      timezone: "America/Los_Angeles"
+    open-pull-requests-limit: 15
+    ignore:
+      # handled by Darc/Maestro flows
+      - dependency-name: "Microsoft.DotNet.Arcade.Sdk"
+      - dependency-name: "Microsoft.DotNet.Helix.Sdk"
+      - dependency-name: "Microsoft.DotNet.SharedFramework.Sdk"
+      - dependency-name: "Microsoft.Build.NoTargets"
+    groups:
+      Azure:
+        patterns:
+          - "Azure.*"
+          - "Microsoft.Azure.*"
+          - "Microsoft.Extensions.Azure"
+      AspNetCoreHealthChecks:
+        patterns:
+          - "AspNetCore.HealthChecks.*"
+      AspNetCore:
+        patterns:
+          - "Microsoft.AspNetCore.*"
+          - "Microsoft.Extensions.Features"
+      MicrosoftExtensions:
+        patterns:
+          - "Microsoft.Extensions.*"
+      EntityFrameworkCore:
+        patterns:
+          - "Microsoft.EntityFrameworkCore.*"
+      FluentUi:
+        patterns:
+          - "Microsoft.FluentUI.*"
+      OpenTelemetry:
+        patterns:
+          - "OpenTelemetry.*"
+      Npgsql:
+        patterns:
+          - "Npgsql.*"
+      MicrosoftDotNet:
+        patterns:
+          - "Microsoft.DotNet.*"
+      Grpc:
+        patterns:
+          - "Grpc.*"
+    labels:
+      - "area-codeflow"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: daily
+    open-pull-requests-limit: 5
+    labels:
+      - area-engineering-systems