Migrate to frequenz-floss dependabot-auto-approve action

Use commit hash instead of version tag for better security and
reproducibility.

Signed-off-by: Mathias L. Baumann <[email protected]>

Author: Marenz

.github/workflows/auto-dependabot.yaml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Auto-merge Dependabot PR
-        uses: ad/dependabot-auto-approve@v1
+        uses: frequenz-floss/dependabot-auto-approve@005e52004f5d5c6af2f81b89ec25e5cf6f3dfd77 # v1.3.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           merge-method: 'merge'