ci: configure private package registry for @dependabot

- https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#registries - https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#configuration-options-for-private-registries Signed-off-by: Lexus Drumgold <unicornware@flexdevelopment.llc>

Author: unicornware

.github/dependabot.yml

@@ -6,6 +6,12 @@
 
 ---
 version: 2
+registries:
+ github:
+ replaces-base: true
+ token: ${{ secrets.GH_TOKEN }}
+ type: npm-registry
+ url: https://npm.pkg.github.com/flex-development
 updates:
  - package-ecosystem: github-actions
  commit-message:
@@ -34,6 +40,8 @@ updates:
  labels:
  - scope:dependencies
  - type:build
+ registries:
+ - github
  reviewers:
  - flex-development/dependabot-review
  - flexdevelopment

.npmrc

@@ -0,0 +1,5 @@
+# https://docs.npmjs.com/cli/configuring-npm/npmrc
+
+@flex-development:registry=https://npm.pkg.github.com/flex-development
+//npm.pkg.github.com/:_authToken=${GITHUB_TOKEN:-GH_TOKEN}
+//npm.pkg.github.com/:always-auth=true