chore: use dependabot cooldown period

read https://blog.pecar.me/how-to-safely-update-your-dependencies/#update-with-cooldowns

configure dependabot docs:
- https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#cooldown- 
- https://docs.github.com/en/code-security/tutorials/secure-your-dependencies/optimizing-pr-creation-version-updates#setting-up-a-cooldown-period-for-dependency-updates