chore: update renovate.json to require approval for all Kotlin updates and key dependencies (#207)

* chore: require dashboard approval for AndroidX dependency updates

As a library, we should not automatically chase every AndroidX update.
Bumping these raises the floor for downstream consumers without benefit
unless we specifically need a new API or bug fix.

https://claude.ai/code/session_01Ey2eARBiUsXEy7xYrzTj8F

* chore: require dashboard approval for Square and all Kotlin updates

Square libraries (especially OkHttp) are transitive dependencies for
consumers via the extension modules. Kotlin patches affect kotlin-stdlib
version consumers receive. Both should be deliberate upgrades.

https://claude.ai/code/session_01Ey2eARBiUsXEy7xYrzTj8F

---------

Co-authored-by: Claude <noreply@anthropic.com>

Author: Manabu-GT

renovate.json

@@ -20,14 +20,10 @@
       "dependencyDashboardApproval": true
     },
     {
-      "description": "Kotlin major/minor updates require approval (for library compatibility)",
+      "description": "Kotlin updates require approval (affects consumers' kotlin-stdlib)",
       "matchPackageNames": [
         "/^org\\.jetbrains\\.kotlin([.:]|$)/"
       ],
-      "matchUpdateTypes": [
-        "major",
-        "minor"
-      ],
       "dependencyDashboardApproval": true
     },
     {
@@ -54,16 +50,18 @@
       ]
     },
     {
-      "description": "AndroidX libraries (excluding Compose)",
+      "description": "AndroidX libraries (excluding Compose) - require approval for library consumers",
       "groupName": "AndroidX libraries",
+      "dependencyDashboardApproval": true,
       "matchPackageNames": [
         "/^androidx\\./",
         "!/^androidx\\.compose/"
       ]
     },
     {
-      "description": "Square libraries (OkHttp, Radiography, etc)",
+      "description": "Square libraries (OkHttp, Radiography, etc) - require approval as transitive deps",
       "groupName": "Square libraries",
+      "dependencyDashboardApproval": true,
       "matchPackageNames": [
         "/^com\\.squareup\\./"
       ]