Tools automatic dependabot updates require validation of manifests

[pmalek]

After #2600 and #2636 have been merged dependabot will create dependency updates for tools defined in third_part/go.mod.

The problem is that changes to versions of those tools might entail changes in manifests e.g. all-in-one manifests.

In order to prevent diverging tools' versions and manifests (created by those tools) let's implement a mechanism that will automatically trigger manifests update in the same PR that the tool version bump is being done.

There is a mechanism in place already that will prevent the PRs that update either the tools or the manifests that would result in a diff when manifests are recreated so this types of PRs shouldn't get merged into main.

Proposed solution

The solution that will be implemented to solve this issue could utilize these Github Actions:

• https://github.com/dependabot/fetch-metadata to fetch PRs metadata to check if dependabot is an author of a PR
• https://github.com/marketplace/actions/git-auto-commit to push a commit with changed manifests

Please note that in order to trigger a subsequent workflow, a Personal Access Token has to be used (instead of GITHUB_TOKEN available in workflows) because only those can trigger a workflow run from another workflow. Docs documenting this use case: https://github.com/marketplace/actions/git-auto-commit#commits-made-by-this-action-do-not-trigger-new-workflow-runs