Configure Renovate to bump dependency ranges and run weekly

[Copilot]

Renovate was effectively producing lockfile-only updates, which left dependency ranges in manifests unchanged. This change switches update behavior to keep package.json and lockfile aligned, and tightens scheduling to a single weekly run.

• Renovate update strategy

  • Set rangeStrategy to bump so dependency updates modify manifest ranges (not just lockfile state).

• Renovate schedule

  • Replaced weekend cron schedule with a clear weekly window: Monday before 4am (America/New_York).
  • Updated config description to match weekly execution intent.

{
  "schedule": ["before 4am on monday"],
  "timezone": "America/New_York",
  "rangeStrategy": "bump"
}