Add best practices for project/repo setttings

Whenever a new project/package is created. We need to do a lot of configuration of infrastructure settings.
A recent example is: https://github.com/JuliaLang/LinearAlgebra.jl/pull/1115
In the above pr we want to set up DependaBot, but the defaults may not be suitable, so some changes need to be made.

There are many more similar best practices when configuring the project CI:
- Specify the commit id of the action instead of the version number for better security
https://github.com/JuliaLang/julia/pull/55283
- macOS -x64 with aarch64
[How to fix GitHub Actions CI failures with Julia 1.6 (or 1.7) on `macos-latest` and `macos-14` - Tooling / Package Management - Julia Programming Language](https://discourse.julialang.org/t/how-to-fix-github-actions-ci-failures-with-julia-1-6-or-1-7-on-macos-latest-and-macos-14/117019)
- ...

I think oh devguide is a good place to write them down.