feat(ci): add version-bump workflow for Renovate PRs (#486)

## Summary
- Adds automated version bumping for Renovate dependency update PRs
- Uses the shared reusable workflow from `Unstructured-IO/infra`
- Automatically bumps `__version__.py`, updates `CHANGELOG.md`, and
refreshes `uv.lock`

## How it works
When Renovate opens or updates a PR, this workflow:
1. Detects which components were changed
2. Parses conventional commit messages to determine bump type
(major/minor/patch)
3. Bumps the version, updates changelog, and commits back to the PR
branch

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Low risk CI-only change that affects automation on Renovate-authored
PRs. Main risk is unintended commits/version bumps if the bot condition
or secrets/permissions are misconfigured.
> 
> **Overview**
> Adds a new GitHub Actions workflow
(`.github/workflows/version-bump.yml`) that runs on `pull_request`
events targeting `main` and only for PRs opened/updated by
`utic-renovate[bot]`.
> 
> The workflow delegates to the shared `Unstructured-IO/infra` reusable
workflow to automatically apply a default *patch* bump, update
`CHANGELOG`, and refresh the lockfile, committing changes back using
provided Renovate app credentials/secrets.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
4575e77. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: lawrence-u10d

.github/workflows/version-bump.yml

@@ -0,0 +1,25 @@
+name: Version Bump
+
+on:
+  pull_request:
+    branches: [main]
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: write
+  pull-requests: read
+
+jobs:
+  version-bump:
+    if: github.event.pull_request.user.login == 'utic-renovate[bot]'
+    uses: Unstructured-IO/infra/.github/workflows/version-bump.yml@main
+    with:
+      component-paths: '["."]'
+      default-bump: patch
+      update-changelog: true
+      update-lockfile: true
+      renovate-app-id: ${{ vars.RENOVATE_APP_ID }}
+    secrets:
+      token: ${{ secrets.GITHUB_TOKEN }}
+      private-pypi-url: ${{ secrets.PRIVATE_PYPI_INDEX_URL }}
+      renovate-app-private-key: ${{ secrets.RENOVATE_APP_PRIVATE_KEY }}