ci(renovate): Force image digest pinning

This patch enables digest pinning for renovate updates, this should help
to keep everything updates even while using mutable tags, such as
`stable` for CoreOS.