Limit dependabot auto-merge to patch and minor semver

[bourgeoa]

Recently dependabot updated to major @inrupt/solid-client-authn-browser c4.0.0
This broke solid-ui

To reduce the risk we can try to only update patch and minor semver

• testing on solid-logic