Add dependabot config for v4

Theoretically this should work, not sure how to test it without merging, though.

We need to first merge #30006 and then this one and it might need further tweaks later.