chore(ci): apply dependency cooldowns (#1431)

add a cooldown to dependency updates to give the securiy communtiy a
better chance of fixing supply chain attacks

.github/dependabot.yml

@@ -11,7 +11,22 @@ updates:
       interval: "daily"
     open-pull-requests-limit: 20
     versioning-strategy: increase
+    cooldown:
+      default-days: 5
+      semver-major-days: 5
+      semver-minor-days: 3
+      semver-patch-days: 3
+      include:
+        - "*"
+      exclude:
+        - "@maplibre/*"
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "daily"
+    cooldown:
+      default-days: 3
+      # no semver support for github-actions
+      # => no specific configuration for this
+      include:
+        - "*"