[Dependancies] node packages

[LaurenceJJones]

We should add a dependabot configuration so we can monitor also node package.json as well as golang deps

https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file