[GitHub] add cooldown to package upgrades

c.f. https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns

Author: minchinweb

.github/dependabot.yml

@@ -1,10 +1,17 @@
 version: 2
 updates:
+
   # Maintain dependencies for GitHub Actions
   - package-ecosystem: "github-actions"
-    directory: "/"
+    directory: "/" # Location of package manifests
     schedule:
-      interval: "daily"
+      interval: "weekly"
+    commit-message:
+      prefix: "[GitHub] "
+      include: "scope"
+    open-pull-requests-limit: 2
+    cooldown:
+      default-days: 7
     labels:
       - "dependencies"
       - "bot"