Group dependabot PRs

[ludfjig]

In my opinion it would be nicer to get 1 dependabot PR per week, instead of our current situation where we get spammed with at least 5 every day.

https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#groups--