Update dependabot config for github actions

[gewarren]

Contributes to dotnet/docs-tools#743.

[Copilot]

🟢 Approval recommended

All reviewed changes are dependency pinning and Dependabot configuration updates with no unresolved issues.

Pull request overview

Updates GitHub Actions dependencies to immutable commits and configures grouped Dependabot updates.

Changes:

• Pins internal actions to a fixed commit SHA.
• Groups GitHub Actions updates in Dependabot.
• Applies scheduled updates with a cooldown period.

File summaries

File	Description
.github/workflows/version-sweep.yml	Pins the version updater action.
.github/workflows/quest.yml	Pins OIDC and sequester actions.
.github/workflows/quest-bulk.yml	Pins bulk workflow actions.
.github/workflows/ops-build-reporter.yml	Pins the build reporter action.
.github/workflows/docs-verifier.yml	Pins the docs verifier action.
.github/workflows/dependabot-bot.yml	Pins the Dependabot bot action.
.github/workflows/cleanrepo-replace-redirects.yml	Pins the cleanrepo action.
.github/workflows/cleanrepo-relative-links.yml	Pins the cleanrepo action.
.github/workflows/cleanrepo-redirect-hops.yml	Pins the cleanrepo action.
.github/workflows/cleanrepo-orphaned-snippets.yml	Pins the cleanrepo action.
.github/workflows/cleanrepo-orphaned-includes.yml	Pins the cleanrepo action.
.github/workflows/cleanrepo-orphaned-images.yml	Pins the cleanrepo action.
.github/workflows/cleanrepo-orphaned-articles.yml	Pins the cleanrepo action.
.github/workflows/check-for-build-warnings.yml	Pins the status checker action.
.github/dependabot.yml	Groups GitHub Actions updates.

Review details

• Files reviewed: 15/15 changed files
• Comments generated: 0
• Review effort level: Lite

---

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

[wadepickett]

I'm not familure with this enough to know for sure how this reacts on the next run. Does dependabot-bot's template in docs-tools need the matching groups: change, or will Monday's run revert this output? Or maybe there is another related PR?

[wadepickett]

@gewarren: Looks good to me, approved. I did add a comment on a line where it was not clear to me how a round trip would effect the output. You might look that over first before merging.