replace dependabot by renovate

Currently we're using dependabot to track package updates. But dependabot does not support pinned apk package and base image digests. So we'd like to switch over to [renovate](https://github.com/renovatebot/renovate). ChatGPT can help with this.