chore: group dependabot updates into fewer PRs

Adds groups so patch/minor bumps land in one PR per group instead of
one PR per dependency: "angular" (Angular packages + zone.js/rxjs/
tslib), "dev-dependencies" (everything under devDependencies), and
"security-updates" so transitive-dependency security alerts also get
bundled together. Majors stay ungrouped so they still get individual
PRs for review.

Author: samuelsonbrito

.github/dependabot.yml

@@ -26,6 +26,28 @@ updates:
     reviewers:
       - "SEU_USUARIO_GITHUB"
 
+    groups:
+      angular:
+        patterns:
+          - "@angular/*"
+          - "zone.js"
+          - "rxjs"
+          - "tslib"
+        update-types:
+          - "minor"
+          - "patch"
+
+      dev-dependencies:
+        dependency-type: "development"
+        update-types:
+          - "minor"
+          - "patch"
+
+      security-updates:
+        applies-to: "security-updates"
+        patterns:
+          - "*"
+
     ignore:
       - dependency-name: "@angular/*"
         update-types: