bug: renovate doesn't update everything it should

Summary

Renovate is missing config to update the resources section of the hardening_manifest.yaml.

I would like it to update the tag and sha, so that I don't have to manually update it when renovate detects a new version.