chore(deps): lock file maintenance

Ensure renovate runs properly on each PR. Also turn on best-practices.

.forgejo/workflows/check.yml

@@ -19,6 +19,14 @@ jobs:
           nix --version
           # shellcheck disable=SC2016
           nix build --print-build-logs '.#checks.x86_64-linux.${{ matrix.check }}'
+  check-renovaterc:
+    runs-on: nixos
+    steps:
+      - uses: "https://git.salame.cl/actions/checkout@v4"
+      - name: Validate renovaterc.json
+        run: |
+          nix --version
+          nix shell nixpkgs#renovate --command renovate-config-validator
   build:
     runs-on: nixos
     needs: check

.renovaterc.json

@@ -10,7 +10,7 @@
   "dependencyDashboard": true,
   "prCreation": "immediate",
   "extends": [
-    "config:recommended"
+    "config:best-practices"
   ],
   "nix": {
     "fileMatch": [