feat!: only renovate image to major version (renovate-bot/renovate-runner!3294)

BREAKING CHANGE: Renovate image is only pinned to major version docker tag. Addistionally the `pull_policy` is set to `always` to force image updates. This requires GitLab 15.4.