Set up dependabot for automated dependency upgrades

Manually upgrading our dependencies is a hassle and is infrequent, so we don't get bugfixes and security updates in a timely fashion. Dependabot should be able to alleviate this by making automated pull requests to upgrade Go module dependencies.