Create renovate service account

Problem

We need a renovate service account that can setup the scheduled pipelines according to the instructions set out in the README.md file of the project template.

Goal

Configure automated dependency checking for code repositories using a service account.

A/Cs

• a renovate service account exists with repo / group read-write permissions
• a PAT is generated for configuring scheduled pipelines across repositories (api scope)
• the PAT is kept in a secret vault to be defined (project-wide secrets vault?)

Notes/Resources

• NB: maybe openCode already has global service accounts for any project that needs them? Answer: We asked, they do not.