Group dependabot updates and bump all outstanding dependencies

[flipbit]

Summary

Brought the dependabot config in line with the whois project - weekly runs on Monday mornings instead of daily, and all NuGet updates grouped into a single PR. Should cut down on the noise from individual version bump PRs piling up.

Also rolled in the outstanding version bumps from the 7 open dependabot PRs (#120, #124, #126, #128, #132, #133, #136), so those can be closed once this merges.

Dependency updates:

Package	From	To
Meziantou.Analyzer	3.0.137	3.0.172
Microsoft.Extensions.DependencyInjection	9.0.10	10.0.11
Microsoft.Extensions.DependencyInjection.Abstractions	10.0.9	10.0.11
Microsoft.Extensions.Logging	8.0.0	10.0.11
Microsoft.Extensions.Logging.Abstractions	10.0.9	10.0.11
Microsoft.Extensions.Options	8.0.0	10.0.11
Microsoft.Extensions.Configuration	10.0.10	10.0.11
Microsoft.Extensions.Configuration.Json	10.0.10	10.0.11
Microsoft.NET.Test.Sdk	18.8.1	18.9.0
Microsoft.SourceLink.GitHub	10.0.301	10.0.400
System.IO.Hashing	10.0.10	10.0.11
xunit.runner.visualstudio	3.1.5	4.0.0

Test plan

• All 1762 tests pass
• CI build passes
• Close superseded dependabot PRs (Bump Microsoft.Extensions.Configuration and Microsoft.Extensions.Configuration.Json #120, Bump Microsoft.Extensions.DependencyInjection.Abstractions and Microsoft.Extensions.Logging.Abstractions #124, Bump Microsoft.SourceLink.GitHub and System.IO.Hashing #126, Bump Microsoft.Extensions.DependencyInjection and 3 others #128, Bump Microsoft.NET.Test.Sdk from 18.8.1 to 18.9.0 #132, Bump xunit.runner.visualstudio from 3.1.5 to 4.0.0 #133, Bump Meziantou.Analyzer from 3.0.137 to 3.0.172 #136) after merge