Feature: Add dependabot and codeQL

[Subtixx]

For dependency alerts it is helpful to have dependabot, this way a PR gets opened each time a dependency is updated this keeps all dependencies up2date.

CodeQL will analyze the quality of code. This will ensure that the code in the repository is secure and meets certain standards

[Subtixx]

I have an untested fix in my repository. However this can only be merged / create a PR when we have a Linux build. Since CodeQL builds the code on ubuntu-latest.