ci(renovate): automerge non-major + lockfile, document registry mapping

Automerge third-party minor/patch updates and lockfile maintenance via
Gitea auto-merge; @played/* and majors stay manual. Document the bunfig.toml
scope mapping and the no-PR-CI automerge caveat.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

renovate-config.json

@@ -4,17 +4,20 @@
 	"timezone": "Europe/Berlin",
 	"rangeStrategy": "bump",
 	"labels": ["dependencies"],
+	"platformAutomerge": true,
 	"packageRules": [
 		{
-			"description": "Bump the internal @played/* packages together, promptly.",
+			"description": "Bump the internal @played/* packages together. Manual merge — 0.x bumps can be breaking and merging redeploys the game.",
 			"matchPackageNames": ["/^@played//"],
-			"groupName": "@played packages"
+			"groupName": "@played packages",
+			"automerge": false
 		},
 		{
-			"description": "Batch third-party non-major updates into one PR to cut noise.",
+			"description": "Batch third-party non-major updates into one PR and automerge.",
 			"matchUpdateTypes": ["minor", "patch"],
 			"matchPackageNames": ["!/^@played//"],
-			"groupName": "non-major dependencies"
+			"groupName": "non-major dependencies",
+			"automerge": true
 		},
 		{
 			"description": "Internal Gitea reusable workflow (pinned @main) — not a github.com action, don't manage it.",
@@ -25,6 +28,7 @@
 	],
 	"lockFileMaintenance": {
 		"enabled": true,
+		"automerge": true,
 		"schedule": ["before 9am on monday"]
 	}
 }