chore(deps): add Renovate rule for org workflow SHA pin updates

CI-056 compliance: adds followTag rule for ByronWilliamsCPA/.github
packages so Renovate keeps SHA pins current after each release.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: williaby

renovate.json

@@ -0,0 +1,27 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended"
+  ],
+  "packageRules": [
+    {
+      "description": "Pin GitHub Actions to commit SHA",
+      "matchManagers": [
+        "github-actions"
+      ],
+      "pinDigests": true
+    },
+    {
+      "description": "Track org workflow floating v1 tag for SHA pin updates",
+      "matchManagers": [
+        "github-actions"
+      ],
+      "matchPackagePatterns": [
+        "ByronWilliamsCPA/.github",
+        "williaby/.github"
+      ],
+      "versioning": "semver",
+      "followTag": "v1"
+    }
+  ]
+}