Update cookiecutter template via cruft

[Zeitsperre]

Pull Request Checklist:

• This PR addresses an already opened issue (for bug fixes / features)
  • This PR fixes #xyz
• (If applicable) Documentation has been added / updated (for bug fixes / features).
• (If applicable) Tests have been added.
• CHANGES.rst has been updated (with summary of main changes).
  • Link to issue (:issue:number) and pull request (:pull:number) has been added.

What kind of change does this PR introduce?

• Updates the cookiecutter with the newest conventions and workflows

Does this PR introduce a breaking change?

Boilerplate documentation is largely unchanged. Workflows are now more a bit more elegant, including automatic labelling, warnings about unsafe changes to workflows, security-related changes, etc.

actions-versions-updater.yml has been replaced with Dependendabot (it's just better).

There's support for evaluating the OpenSSF Scorecard (this can be disabled if we want).

Code formatting tools are now hard-pinned. These need to be kept in sync with changes from pre-commit. Dependabot should do this task automatically via Pull Requests.

Versioning scheme is now SemVer 2.0-compliant:

• If the version doesn't end in -dev or -dev.##, $ bump-my-version bump patch will be called. This will set the version at X.Y.Z+1-dev. Otherwise, $ bump-my-version bump build will be called. This is all automated by the bump-version.yml.

When the version is ready for a release, it's up to the maintainer to call the following:

• $ bump-my-version bump release (for a patch release; i.e. 1.2.0 → 1.2.1) or
• $ bump-my-version bump minor then $ bump-my-version bump release (for a minor release; i.e. 1.2.0 → 1.3.0)

There is now also support for Documentation locales (translations) via .po files. These can be staged with $ make initialize-translations, whereby .po files will be generated and French (or other) language strings can be added.

Other information:

Ouranosinc/cookiecutter-pypackage#30

[sarahclaude]

Merci Trevor!