fix: no digest pinning of own image

Adds a package rule to disable updates for the 
'unboundsoftware/schemas' package in Kubernetes. 
Modifies the image reference in the deployment 
configuration to remove the specific SHA256 hash 
and use a dynamic commit tag instead. This 
improves maintainability and aligns with the 
latest deployment practices.

k8s/deploy.yaml

@@ -55,7 +55,7 @@ spec:
           periodSeconds: 5
           timeoutSeconds: 5
         imagePullPolicy: IfNotPresent
-        image: registry.gitlab.com/unboundsoftware/schemas@sha256:198d7bfdf921d57b7bf491a4ea4a5c674e6af71904459b972eb0bcd9254aa588:${COMMIT}
+        image: registry.gitlab.com/unboundsoftware/schemas:${COMMIT}
         ports:
         - name: api
           containerPort: 8080

renovate.json

@@ -2,5 +2,16 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "config:recommended"
+  ],
+  "packageRules": [
+    {
+      "matchManagers": [
+        "kubernetes"
+      ],
+      "matchPackageNames": [
+        "registry.gitlab.com/unboundsoftware/schemas"
+      ],
+      "enabled": false
+    }
   ]
 }