Add a weekly Dependabot configuration for pip, the Dockerfile base image, and the GitHub Actions used by the publish workflow. The Seafile AppImage is fetched by URL with a pinned checksum, which Dependabot cannot resolve, so it stays a manual bump. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>