TA: Setup auto-merge via Renovate

no ref

- This just makes updates simpler by having Renovate handle them for us via commits
- This means it'll auto bump all minor + match updates to TA images but _not_ major and it'll instead open up a PR

.github/renovate.json5

@@ -15,12 +15,18 @@
 			matchUpdateTypes: ["pinDigest"],
 			automerge: true,
 		},
+		{
+			description: "Auto-merge trusted package updates",
+			matchDatasources: ["docker", "docker-compose", "github-tags"],
+			matchUpdateTypes: ["minor", "patch"],
+			matchPackageNames: ["ghost/traffic-analytics"],
+			automerge: true,
+		},
 		{
 			description: "Don't pin Ghost images till we have v1",
 			matchDatasources: ["docker", "docker-compose"],
 			matchPackageNames: [
 			    "ghost",
-				"ghost/traffic-analytics",
 				"ghcr.io/tryghost/activitypub",
 				"ghcr.io/tryghost/activitypub-migrations",
 			],