Automate yarn upgrade through new github workflow

[cwperks]

Description

This PR adds a new Github workflow that runs weekly. It will checkout OSD + security-dashboards-plugin, do the necessary installs and then run yarn upgrade. If there are any changes in package.json or yarn.lock then it will open a PR to this repo.

This PR automates repo chores so we don't need to keep raising PRs like #2385

Category

Maintenance

Check List

• New functionality includes testing
• New functionality has been documented
• Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 71.59%. Comparing base (353df7d) to head (71abbc4).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #2386   +/-   ##
=======================================
  Coverage   71.59%   71.59%           
=======================================
  Files         101      101           
  Lines        3010     3010           
  Branches      529      529           
=======================================
  Hits         2155     2155           
  Misses        699      699           
  Partials      156      156           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.