chore: update dependabot to manage pip ecosystem (#289)

start chipping away at security vulnerabilities

Signed-off-by: Nathan Weinberg <nathansweinberg@gmail.com>

Author: nathan-weinberg

.github/dependabot.yml

@@ -3,5 +3,8 @@ updates:
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      # Check for updates to GitHub Actions every week
+      interval: "weekly"
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
       interval: "weekly"