Compare GitHub actions with core CAPI

[sbueringer]

We should diff the GitHub actions we have in CAPV with core CAPI. I think we are now using almost the same, but there is a bit more room for improvement, e.g.:

• maybe the dependabot action also makes sense for CAPV
• we are consistently pinning GitHub actions by sha in core CAPI (in CAPV not everywhere yet)
• Let's also take a look at the dependabot config

But let's just do a full diff and then discuss what we want to use in CAPV as well.

[sbueringer]

/assign

[sbueringer]

/assign @killianmuldoon