feat: deploy Renovate Bot via CronJob for automatic dependency updates

- CronJob every 6h, concurrencyPolicy: Forbid
- Platform gitea at git.chemavx.xyz, repos: researchowl, polymarket-bot, n8n
- packageRules: major=PR only, patch=automerge, private registry disabled
- Secret placeholder for Gitea token (fill in before applying ArgoCD app)
- ArgoCD Application with automated sync

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

renovate/configmap-renovate.yaml

@@ -0,0 +1,46 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: renovate-config
+  namespace: renovate
+data:
+  config.js: |
+    module.exports = {
+      platform: 'gitea',
+      endpoint: 'https://git.chemavx.xyz',
+      repositories: [
+        'chemavx/researchowl',
+        'chemavx/polymarket-bot',
+        'chemavx/n8n',
+      ],
+      automerge: false,
+      assignees: ['chemavx'],
+      labels: ['renovate'],
+      prCreation: 'not-pending',
+      timezone: 'Europe/Madrid',
+      schedule: ['after 9am and before 6pm on weekdays'],
+      packageRules: [
+        {
+          // Major bumps: crear PR pero no automerge, requiere revisión manual
+          matchUpdateTypes: ['major'],
+          automerge: false,
+          labels: ['renovate', 'major-update'],
+        },
+        {
+          // Minor bumps: PR sin automerge
+          matchUpdateTypes: ['minor'],
+          automerge: false,
+        },
+        {
+          // Patch bumps: automerge automático
+          matchUpdateTypes: ['patch'],
+          automerge: true,
+          automergeType: 'pr',
+        },
+        {
+          // Imágenes del registry privado: nunca tocar (tags son commits SHA)
+          matchPackagePatterns: ['^git\\.chemavx\\.xyz/'],
+          enabled: false,
+        },
+      ],
+    };