Allow Renovate bot + enable real-time skill progress visibility (#760)

Two fixes to get the Renovate-triggered skill runs actually working
and observable:

1. `allowed_bots: renovate` — without this, claude-code-action
   refuses to run any workflow initiated by a bot identity with
   "Workflow initiated by non-human actor: renovate (type: Bot)."
   This is the action's default safety behavior. We deliberately
   allow Renovate (the whole point of the pipeline) but leave the
   list narrow — other bots still blocked.

2. `track_progress: true` + `display_report: true` — these expose
   live progress during long skill runs:
     - track_progress posts a sticky tracking comment on the PR that
       updates as the skill works through each phase
     - display_report surfaces the Claude Code Report in the Actions
       Step Summary as the step runs, not just after completion

   Skill runs that previously went silent for 20-45 min now stream
   live status.

The track_progress change was supposed to ship in #757 but was
pushed after the squash-merge and got orphaned on the branch.

Seen on run 24743776702 — Renovate PR #759's workflow failed with
the bot-actor rejection.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: rdimitrov

.github/workflows/upstream-release-docs.yml

@@ -422,6 +422,18 @@ jobs:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           additional_permissions: |
             actions: read
+          # Allow the action to run when the triggering PR was opened
+          # by Renovate. Without this, claude-code-action refuses to
+          # run for bot-initiated workflows as a safety default.
+          allowed_bots: 'renovate'
+          # Real-time visibility into skill progress during long runs.
+          # track_progress posts a sticky tracking comment on the PR
+          # that updates as the skill works through each phase.
+          # display_report surfaces the Claude Code Report in the
+          # Actions Step Summary so operators watching the run see
+          # progress without waiting for gh run view --log.
+          track_progress: true
+          display_report: true
           prompt: |
             You are running in GitHub Actions with no interactive user. Follow
             these steps exactly and do NOT ask clarifying questions -- proceed