feat: add renovate config

[outslept]

closes #108

I was afraid to turn automerge on. Even tho most deps are reliable the chain that jscodeshift pulls is insane in length 💀

dependabot minimal alternative

# dependabot.yml
version: 2
updates:
  - package-ecosystem: "npm"
    directory: "/"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 3
    versioning-strategy: "increase"
    groups:
      production-dependencies:
        dependency-type: "production"
      development-dependencies:
        dependency-type: "development"

[43081j]

@thepassle do we have a preference on dependabot vs renovate?

i use both (varies per repo i maintain) and they will do the same job here

i wonder if we should use dependabot since its the one github pushes/recommends

[outslept]

Added dependabot as an alternative to PR desc as well