ci(renovate): revisit renovate.json

Renovate has made a lot of progress in predefined configs over the past
few years this patch revisits the current config and extends it with the
usage of new presets.

renovate.json

 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "config:base",
+    "config:best-practices",
     "docker:enableMajor",
     ":prHourlyLimitNone",
     "regexManagers:dockerfileVersions",
-    ":assignAndReview(sheogorath)"
+    "replacements:all",
+    ":gomod",
+    "security:openssf-scorecard",
+    ":enableVulnerabilityAlertsWithLabel(security)",
+    ":assignee(sheogorath)"
   ],
   "prConcurrentLimit": 20,
   "semanticCommits": "enabled",