ci: configure private package registry for @dependabot

- https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#registries
- https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#configuration-options-for-private-registries

Signed-off-by: Lexus Drumgold <[email protected]>

Author: unicornware

.github/dependabot.yml

@@ -6,6 +6,12 @@
 
 ---
 version: 2
+registries:
+  github:
+    replaces-base: true
+    token: ${{ secrets.GH_TOKEN }}
+    type: npm-registry
+    url: https://npm.pkg.github.com/flex-development
 updates:
   - package-ecosystem: github-actions
     commit-message:
@@ -34,6 +40,8 @@ updates:
     labels:
       - scope:dependencies
       - type:build
+    registries:
+      - github
     reviewers:
       - flex-development/dependabot-review
       - flexdevelopment

.npmrc

@@ -0,0 +1,5 @@
+# https://docs.npmjs.com/cli/configuring-npm/npmrc
+
+@flex-development:registry=https://npm.pkg.github.com/flex-development
+//npm.pkg.github.com/:_authToken=${GITHUB_TOKEN:-GH_TOKEN}
+//npm.pkg.github.com/:always-auth=true