chore: Implement Renovate bot for dependency management alongside Dependabot

[munlicode]

📝 Description

Currently, we need an automated way to keep our repos' dependencies up to date. While GitHub's Dependabot is great, Renovate offers much stronger capabilities for managing complex monorepos, grouping dependency updates into single PRs (e.g., updating all ESLint plugins at once), and setting up auto-merge rules.

We want to adopt a dual-bot strategy:

1. Dependabot: Only used for critical security alerts and vulnerability patching.
2. Renovate: Used for all standard, non-security dependency upgrades (npm, github actions, etc.).

✅ Acceptance Criteria (To-do)

• Install the Renovate GitHub App into the organization/repository.
• Configure renovate.json (or .github/renovate.json) at the root of the repositories.
• Set up PR grouping rules in Renovate (e.g., group all @typescript-eslint/* packages together to reduce PR spam).
• Configure dependabot.yml to only alert/patch security vulnerabilities (disable daily/weekly version updates so it doesn't conflict with Renovate).
• (Optional) Configure Renovate auto-merging for patch/minor updates if CI pipelines pass.
• Less or no management overhead.

🔗 Context

Using both tools gives us the best of both worlds: Dependabot's native integration with GitHub's security advisories, and Renovate's superior flexibility for keeping a monorepo modern without drowning in PRs.

Relevant Documentation:

• Renovate Docs
• Dependabot Security Updates