## Problem Renovate is generating invalid YAML when it updates `hardening_manifest.yaml` digest entries for `docker.io/envoyproxy/gateway`. The updated `url` lines end up with an extra trailing quote, for example: ```yaml url: "docker://docker.io/envoyproxy/gateway@sha256:62b7313374dde9e3db69896a37b424593a1b70210cfcd04e3535761684308a19"" ``` This breaks Iron Bank CI during the setup job with a YAML parse error from hardening_manifest.yaml. ### Root cause The Renovate regex manager matched the digest value but did not consume the closing quote on the url line. The replacement then wrote a new quoted value, leaving the original trailing quote behind. The config had also drifted from the actual manifest format by matching and replacing unquoted YAML while hardening_manifest.yaml uses quoted values. ### Fix Update the Renovate regex managers so they consume the optional closing quote on url lines and align the arm64 replacement template with the quoted YAML format used in the manifest. Expected result Future Renovate updates should: - preserve valid YAML in hardening_manifest.yaml - stop generating doubled trailing quotes - allow Iron Bank setup jobs to parse the manifest successfully