update renovate to update using hash pinning

Author: jprusik

.github/renovate.json

@@ -2,12 +2,23 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": ["github>bitwarden/renovate-config"],
   "enabledManagers": [
+    "custom.regex",
     "dockerfile",
     "docker-compose",
     "github-actions",
     "npm",
     "nvm"
   ],
+  "customManagers": [
+    {
+      "customType": "regex",
+      "fileMatch": ["(^|/)docker-compose\\.ya?ml$"],
+      "matchStrings": [
+        "image:\\s+(?<depName>[^@\\s]+)@(?<currentDigest>sha256:[a-f0-9]+)\\s+#\\s+(?<currentValue>\\S+)"
+      ],
+      "datasourceTemplate": "docker"
+    }
+  ],
   "packageRules": [
     {
       "groupName": "dockerfile minor",
@@ -16,7 +27,7 @@
     },
     {
       "groupName": "docker-compose minor",
-      "matchManagers": ["docker-compose"],
+      "matchManagers": ["docker-compose", "custom.regex"],
       "matchUpdateTypes": ["minor", "patch"]
     },
     {