Use minimimum release age in renovate to avoid recent supply chain exploits

[coretl]

https://docs.renovatebot.com/key-concepts/minimum-release-age/

[coretl]

Also https://blog.pypi.org/posts/2026-04-02-incident-report-litellm-telnyx-supply-chain-attack/#dependency-cooldowns