[9.1.x] "Correct" dependency submission workflow (backport #391) by @mkurz

[mergify]

Seems while scalacenter/sbt-dependency-submission#84 was in progress I submitted #252 which I never reverted.
I mean it's ok, it works, but I quickly diffed all .github/workflows/dependency-graph.yml files of all our projects and they are all the same except this one.

---

This is an automatic backport of pull request #391 done by Mergify.

[mergify]

Cherry-pick of 3d691a3 has failed:

On branch mergify/bp/9.1.x/pr-391
Your branch is up to date with 'origin/9.1.x'.

You are currently cherry-picking commit 3d691a3.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   .github/workflows/dependency-graph.yml

no changes added to commit (use "git add" and/or "git commit -a")

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally