feat(ci): add version-bump workflow for Renovate PRs (#666)

## Summary
- Adds automated version bumping for Renovate dependency update PRs
- Uses the shared reusable workflow from `Unstructured-IO/infra`
- Automatically bumps `__version__.py`, updates `CHANGELOG.md`, and
refreshes `uv.lock`

## How it works
When Renovate opens or updates a PR, this workflow:
1. Detects which components were changed
2. Parses conventional commit messages to determine bump type
(major/minor/patch)
3. Bumps the version, updates changelog, and commits back to the PR
branch

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Low risk: adds a new GitHub Actions workflow only, gated to run on PRs
opened/updated by `utic-renovate[bot]`. Main risk is unintended
PR-branch writes (version/changelog/lockfile) if the reusable workflow
or bot identity/permissions are misconfigured.
> 
> **Overview**
> Adds a new GitHub Actions workflow
(`.github/workflows/version-bump.yml`) that runs on `pull_request`
events targeting `main` and **only** for PRs opened/updated by
`utic-renovate[bot]`.
> 
> The job delegates to the shared reusable workflow
`Unstructured-IO/infra/.github/workflows/version-bump.yml@main`,
configured to default to a *patch* bump and to update the changelog and
lockfile, using repo secrets/vars to authenticate and access the private
PyPI index.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
4cd1dd0. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: lawrence-u10d

.github/workflows/version-bump.yml

@@ -0,0 +1,25 @@
+name: Version Bump
+
+on:
+  pull_request:
+    branches: [main]
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: write
+  pull-requests: read
+
+jobs:
+  version-bump:
+    if: github.event.pull_request.user.login == 'utic-renovate[bot]'
+    uses: Unstructured-IO/infra/.github/workflows/version-bump.yml@main
+    with:
+      component-paths: '["."]'
+      default-bump: patch
+      update-changelog: true
+      update-lockfile: true
+      renovate-app-id: ${{ vars.RENOVATE_APP_ID }}
+    secrets:
+      token: ${{ secrets.GITHUB_TOKEN }}
+      private-pypi-url: ${{ secrets.PRIVATE_PYPI_INDEX_URL }}
+      renovate-app-private-key: ${{ secrets.RENOVATE_APP_PRIVATE_KEY }}