Enable Renovate auto-merge

[NiccoloFei]

Enable automerge in Renovate's config.
Allow builds & security-scans to run on: pull_request, in order to automatically test Renovate's changes.
Enable GH status checks (Bake jobs) for the main branch.