bug: renovate doesn't update everything it should

Summary

Renovate is missing config to update the resources section of the hardening_manifest.yaml.

I would like it to update the tag and sha, so that I don't have to manually update it when renovate detects a new version.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information