Dependabot: `go mod tidy` and `vendor` support

Dependabot version updates now run the go mod tidy command during every update, which helps keep your go.mod file well-organized and free of stale module versions.

If your repository vendors its dependencies with go mod vendor, Dependabot now respects that configuration during version updates. No changes to the configuration file are required.