chore(security): enable Renovate for GitHub Actions SHA pinning

Author: Sourcegraph

.github/renovate.json5

@@ -0,0 +1,4 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["github>wandb/renovate-config"]
+}