v0.0.1

chore: label Renovate PRs with dependencies (#74)

## Summary

Renovate opens its PRs without any label, so the release-drafter label
check fails on each one until someone adds a label by hand. This PR
makes Renovate add `dependencies` to every PR it opens, the same label
Dependabot already uses.

## Changes

- `renovate.json` sets `"labels": ["dependencies"]` for all Renovate
PRs, including the grouped ones.

## Compatibility

- [x] No breaking changes
- [ ] Breaking — described above, with migration notes

## Tests

- [ ] `go test ./...` passes locally (N/A, config only)
- [ ] `go vet ./...` clean (N/A)
- [ ] `golangci-lint run` clean (N/A)
- [ ] New tests added for new behaviour (or N/A)
- [ ] Sample fixture sanitised (N/A)

We checked the option against Renovate's published config schema.
Renovate's next run will show the label on new PRs.

## Security

- [x] No new external dependencies (or: justified in description)
- [x] No secrets added; new env / HCL fields documented in `README.md` /
table docs
- [ ] If the PR touches the S3 source or any path-joining code, the
`validateArtifactKey` test still covers the new path (N/A)