Add BASE_TAG to Renovate config
A recent Renovate update !54 (merged) missed updating BASE_TAG in hardening_manifest.yaml. I had to update it manually !55 (merged)
@sean.melissari Can you double check this renovate config update? Is this the right way to add the BASE_TAG to the update logic?