arrow

GH-44404: [CI] Stop running CI "push" jobs for Dependabot (#44405)

### Rationale for this change

They are redundant. We have the same jobs for "push" and "pull_request". We don't need either of them.

### What changes are included in this PR?

Ignore `dependabot/**` branches for "push".

We need to define not only `branches:` but also `tags:`. If we don't define `tags:`, the target workflows aren't trigger by tag push.

See also: https://docs.github.com/en/actions/writing-workflows/workflow-syntax-for-github-actions#onpushbranchestagsbranches-ignoretags-ignore

> If you define only tags/tags-ignore or only branches/branches-ignore, the workflow won't run for events affecting the undefined Git ref. If you define neither tags/tags-ignore or branches/branches-ignore, the workflow will run for events affecting either branches or tags. If you define both branches/branches-ignore and [paths/paths-ignore](https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#onpushpull_requestpull_request_targetpathspaths-ignore), the workflow will only run when both filters are satisfied.

### Are these changes tested?

No. Let's try on apache/arrow main.

### Are there any user-facing changes?

No.
* GitHub Issue: #44404

Authored-by: Sutou Kouhei <kou@clear-code.com>
Signed-off-by: Sutou Kouhei <kou@clear-code.com>