ci(renovate): serialize runs, quiet logs, clean config-file env

- Add a concurrency group so the hourly schedule and push-to-main triggers
  cannot run Renovate twice at once (avoids duplicate PRs and concurrent Gitea
  writes).
- Lower LOG_LEVEL from debug to info for normal operation.
- Remove leftover template comments from the RENOVATE_CONFIG_FILE and token env.

Closes #43
Closes #44
Closes #45

.gitea/workflows/renovate.yaml

@@ -7,6 +7,12 @@ on:
     branches:
       - main
 
+# Serialize runs: the hourly schedule and a push to main can otherwise overlap,
+# producing duplicate PRs and concurrent writes to Gitea.
+concurrency:
+  group: renovate
+  cancel-in-progress: false
+
 jobs:
   renovate:
     runs-on: ubuntu-latest
@@ -15,7 +21,7 @@ jobs:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       - run: renovate
         env:
-          RENOVATE_CONFIG_FILE: "/workspace/lyrathorpe/renovate-config/config.js" # replace it with your config.js path
-          LOG_LEVEL: "debug"
-          RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }} # your Revonate bot token
+          RENOVATE_CONFIG_FILE: "/workspace/lyrathorpe/renovate-config/config.js"
+          LOG_LEVEL: "info"
+          RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
           RENOVATE_GITHUB_COM_TOKEN: ${{ secrets.RENOVATE_GITHUB_TOKEN }}