build: add renovate bot workflow

.github/workflows/renovate.yaml

@@ -0,0 +1,23 @@
+name: Renovate
+
+on:
+  schedule:
+    - cron: "0 0 * * MON"
+
+jobs:
+  renovate:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v4
+    - name: Self-hosted Renovate
+      uses: renovatebot/[email protected]
+      with:
+        token: ${{ secrets.RENOVATE_PATH }}
+        configurationFile: renovate.json
+      env:
+        RENOVATE_REPOSITORIES: ${{ github.repository }}
+        LOG_LEVEL: info
+        RENOVATE_ONBOARDING: false

renovate.json

@@ -0,0 +1,6 @@
+{
+    "branchPrefix": "renovate/",
+    "pinDigests": false,
+    "prHourlyLimit": 20,
+    "labels": ["global", "dependencies"]
+}