Add dependabot, remove unused release.yml, fix permissions

.github/dependabot.yml

@@ -0,0 +1,12 @@
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+version: 2
+updates:
+  - package-ecosystem: 'github-actions'
+    directory: '.github/workflows'
+    schedule:
+      interval: 'daily'
+  - package-ecosystem: 'npm'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+      day: 'monday'

.github/workflows/tests.yml

@@ -1,5 +1,6 @@
 name: 'tests'
 
+permissions: {}
 on:
   workflow_dispatch:
   push:
@@ -222,7 +223,6 @@ jobs:
   web-integration-tests-cloud-smt:
     needs: node-unit-tests
     runs-on: ubuntu-latest
-    permissions: write-all
     steps:
       - uses: actions/checkout@main