chore: add renovate bot for deps in rigging

[GangGreenTemperTatum]

Notes

• adds renovate bot to rigging to take care of rigging deps
• tagging @monoxgas for review for here RE current approach to automerge minor and patches once approved. Please let me know if this is too aggressive and we can tune accordingly:

    {
      description: "Auto merge non-major updates",
      matchUpdateTypes: ["minor", "patch"],
      automerge: true,
      automergeType: "pr",
    },

---

Generated Summary

This PR introduces a comprehensive setup for Renovate to automate dependency updates.

• Added a new configuration file .github/renovate.json5 with base settings tailored for our project.
• Configured key features:
  • Dependency dashboard for better visibility.
  • Automated merging of non-major updates to streamline dependency management.
  • Specific rules for handling pytest packages and Python version constraints.
• Established a new GitHub Actions workflow in .github/workflows/renovate.yaml:
  • Scheduled to run daily at 20:00 UTC to check for updates.
  • Supports manual triggering with options for dry run and log level.
  • Deletes previous Renovate dashboard issues to keep the list manageable.
• The workflow leverages a GitHub App token for authentication, enhancing security for the automation process.

These changes aim to improve our dependency management process while ensuring that we remain on top of essential updates.

This summary was generated with ❤️ by rigging

[l50]

Looks right to me!

[monoxgas]

Looks good to me!