chore(deps): automerge minor, patch, digest and pin Renovate updates

Renovate merges these updates with a merge commit once the required
check passes, three days after their release. Major updates stay manual.
The develop merge allowlist admits the renovate bot for this.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

renovate.json

@@ -4,5 +4,18 @@
     "config:recommended"
   ],
   "prConcurrentLimit": 3,
-  "automerge": false
+  "automerge": false,
+  "automergeStrategy": "merge-commit",
+  "minimumReleaseAge": "3 days",
+  "packageRules": [
+    {
+      "matchUpdateTypes": [
+        "minor",
+        "patch",
+        "digest",
+        "pin"
+      ],
+      "automerge": true
+    }
+  ]
 }