Setup renovate to automatically update lighthouse (& lockfile)

[G-Rath]

We should setup renovate to automatically update lighthouse & refresh our lockfile (for security & whatnot), configured to auto-merge so we don't need to worry unless CI fails.

(@joshmcarthur I remembered why renovate over dependabot: the latter doesn't support automerge yet)