move renovate.json to the root dir and allow ignoring tests for merging GHA patch/minor updates only
switch the appVersion in Chart.yaml to a specific sha tag that should actually work, until pixelfed does another official release
set the securityContext and podSecurityContext to run as user 33, which is www-data to solve security root escalation issue
Signed-off-by: jessebot <jessebot@linux.com>
Jesse Hitch