ci: fix Chore/add renovate (#35)

* ci: add Renovate for automated dependency updates

* fix github action version

* fix: prevent pre-push protect-main hook from hanging on stdin read

lefthook.yml

@@ -33,12 +33,11 @@ pre-push:
   commands:
     protect-main:
       run: |
-        while read local_ref local_sha remote_ref remote_sha; do
-          if [ "$remote_ref" = "refs/heads/main" ]; then
-            echo "Direct push to main is not allowed. Use a pull request instead."
-            exit 1
-          fi
-        done
+        branch=$(git rev-parse --abbrev-ref HEAD)
+        if [ "$branch" = "main" ]; then
+          echo "Direct push to main is not allowed. Use a pull request instead."
+          exit 1
+        fi
       skip:
         - merge
         - rebase