chore(ci): dependabot gomod for sec updates only

Dependabot is now set to run daily for Go modules, but it will only
create pull requests for security-related updates.

Version bumps for gomod non-security updates will be handled manually,
as we have many dependencies that require thorough testing.

Author: geyslan

.github/dependabot.yaml

@@ -5,18 +5,33 @@ version: 2
 updates:
   - package-ecosystem: "github-actions"
     directory: "/"
+    commit-message:
+      prefix: '[github-actions] - '
     schedule:
       interval: "weekly"
+
+  - package-ecosystem: "docker"
+    directories:
+      - "/builder"
+    commit-message:
+      prefix: '[docker] - '
+    schedule:
+      interval: "weekly"
+
   - package-ecosystem: "gomod"
     directories:
       - "/"
       - "/api"
       - "/types"
       - "/signatures/helpers"
     schedule:
-      interval: "weekly"
-  - package-ecosystem: "docker"
-    directories:
-      - "/builder"
-    schedule:
-      interval: "weekly"
+      interval: "daily"
+    commit-message:
+      prefix: '[gomod][sec] - '
+    groups:
+      # Group security updates for golang dependencies
+      # into a single pull request
+      golang:
+        applies-to: security-updates
+        patterns:
+          - "*"