chore: Update determine-image-tag and add Renovate config

[msugakov]

Description

Some maintenance on .tekton yamls and added Renovate config (ROX-22359).

Note that the Renovate config disables git submodules updates. See https://redhat-internal.slack.com/archives/CFMQ5C2TT/p1721817450199969. We can always turn on if we decide it's useful.

It's best to review this change per commits because I tried supplying meaningful message in each.

(Similar to https://github.com/stackrox/scanner/pull/1575)

Checklist

• [ ] Investigated and inspected CI test results
• ~~[ ] Updated documentation accordingly~~

Automated testing

None.

Testing Performed

Relying on CI.