Add cron-renovate workflow with GitHub App token auth

Co-Authored-By: Claude (Opus 4.6) <noreply@anthropic.com>

.github/workflows/cron-renovate.yml

@@ -0,0 +1,25 @@
+name: cron-renovate
+
+on:
+  schedule:
+    - cron: "0 1 * * *" # every day at 01:00 UTC
+  workflow_dispatch:
+
+jobs:
+  cron-renovate:
+    runs-on: ubuntu-latest
+    if: github.repository == 'go-gitea/gitea'
+    steps:
+      - uses: actions/create-github-app-token@v1
+        id: get_token
+        with:
+          app-id: ${{ secrets.RENOVATE_APP_ID }}
+          private-key: ${{ secrets.RENOVATE_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
+          repositories: gitea
+      - uses: actions/checkout@v6
+      - uses: renovatebot/github-action@v46
+        with:
+          token: ${{ steps.get_token.outputs.token }}
+        env:
+          RENOVATE_PLATFORM_COMMIT: "true"

renovate.json

@@ -3,6 +3,5 @@
   "extends": ["config:recommended"],
   "enabledManagers": ["github-actions"],
   "labels": ["modifies/dependencies"],
-  "schedule": ["before 6am"],
   "minimumReleaseAge": "5 days"
 }