Update to rennovate and pin digest

[esc]

As a Numba developer I want all the numba repos to use the same tools in highly similar configuration to increase coherence across sub-projects. As such this project needs:

• an update to use rennovate, as both llvmlite and numba-scfg projects use that
• configure rennovate to pin to digest / SHA1 sum for security hardening (like: Enable Github Action pinning via renovate llvmlite#1156 and Enable renovate to pin Actions to sha1 and semver numba-scfg#175)