Fixes: #4831

Fixes a bug where the manager config was not being passed through correctly.

I use `useConfigOnly = true` so that I ensure I always commit with the
right email to each repo, the tests in this repo assume that global
config is set for name and email.

This is a simple fix that allows me and possibly others to run the test
suite

Closes #4836

Closes #4834

There are a few possibilities to fix this specific bug. This is the shortest fix, and still relatively low risk

Fixes #4823

Incorrect assumptions around the policy API

Fixes #4714

See microsoft/azure-pipelines-image-generation#1317

Fixes #4775, Fixes #4657

* chore(ci): downgrade macos

* chore(ci): use shallow fetch

Azure DevOps returns the target branch in the form of `/ref/heads/master`, but Renovate expects just `master`

Fixes #4812

See [Microsoft-hosted agents](https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/hosted?view=azure-devops#use-a-microsoft-hosted-agent) for a complete list of available images.

These don't update very often, but what do you think about targeting `windows-lates`, `ubuntu-latest`, and `macOS-latest`?