MINOR: Bump `actions/*-artifact` to v4 and enable dependabot (#364)

The artifact actions of <v3 will be removed soon. To avoid PR spam but
also keep actions decently up-to-date I have added a dependabot.yml.
5 files changed