Better renovate configuration

Renovate configuration should be enhanced to update poetry.lock, ignore sub-dependencies where appropriate, and only upgrade patch versions for docker.