Make this repo more dependabot-updatable

[makermelissa]

Not sure if this is a good idea, but I'm thinking something like moving dependencies to package.json and updating GitHub Actions. I think it would require npm. If it adds a lot of overhead though, it may not be worth it.

[makermelissa]

I realized doing this also has the added bonus of fewer outside dependencies.