Address dependabot missing peer dependency updates

[rmanaem]

It seems dependabot addresses dependencies bumps in isolation when it comes to certain packages (e.g., vitest) and doesn't bump their peer dependencies, leading to the npm install command used in various workflows to break. Since we like the automated process of dependency bumps and would like to avoid the hassle of bumping peer dependencies manually ourselves, we have two options to address this:

• Look into dependabot configuration and see if it can be fixed by tweaking things
• Research another tool that does the same thing without having the same issues

[surchs]

There is a setting for "grouped updates": https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#groups--

I'm not sure if that solves all our problems, but let's try it out. I have enabled it on the query tool and it seems to group some related things like here: neurobagel/query-tool#408