ci(renovate): improve digest pinning

renovate.json

@@ -71,7 +71,7 @@
         "\\.yaml$"
       ],
       "matchStrings": [
-        "# renovate:\\n\\s+image: \"?'?(?<depName>[^:\\s]+?):(?<currentValue>[^\"]*?)\"?'?\\s"
+        "# renovate:\\n\\s+image: \"?'?(?<depName>[^:\\s]+?):(?<currentValue>[^\"]*?)@?(?<currentDigest>sha256:[a-f0-9]+)?\"?'?\"?'?\\s"
       ],
       "datasourceTemplate": "docker",
       "versioningTemplate": "docker"
@@ -132,16 +132,6 @@
       ],
       "allowedVersions": "<40"
     },
-    {
-      "matchDatasources": [
-        "helm"
-      ],
-      "matchPackageNames": [
-        "rook-ceph",
-        "rook-ceph-cluster"
-      ],
-      "groupName": "rook-ceph"
-    },
     {
       "matchDatasources": [
         "helm"
@@ -164,11 +154,13 @@
     },
     {
       "matchFileNames": [
-        "images/kos/**"
+        "charts/**",
+        "cluster/**/flux-system/**"
       ],
-      "extends": [
-        "docker:pinDigests"
-      ]
+      "matchDatasources": [
+        "docker"
+      ],
+      "pinDigests": false
     }
   ],
   "postUpdateOptions": [