chore: using dependabot groups

[fabnguess]

No description provided.

[PierreDemailly]

As disccused with @fabnguess, I wonder if we should have a 4th group for @nodesecure/* pattern.
For instance in this repository, we would have a group that update only @nodesecure/eslint-config & @nodesecure/npm-registry-sdk.
This 4th group would take both deps & devDeps (because @nodesecure/eslint-config is a devDep almost everywhere).
And we exclude the @nodesecure/* from the originals deps & devDeps groups.

WDYT @fraxken ?

Edit: we can also create this 4th group only for packages that have more @nodesecure dependencies like @nodesecure/cli, @nodesecure/scanner..

[fraxken]

@PierreDemailly why not (but not sure if that's useful for all projects tho)

[PierreDemailly]

Yeah only Cli & Scanner should be fine