Add StepSecurity bot to allow list

We will soon start using StepSecurity to provide PR to projects to fix some of their github actions. PR are created by bot with the email address bot@stepsecurity.io. Please add it to the allow list.

/cc @fcojperez