chore(ci): bump renovate-config pin from #6 to #7 (hardened ai-agent lane)

[ANcpLua]

Summary

One-line SHA bump on the consumed reusable workflow:

• Old: @1e1c5c61 (PR Bump the roslyn group with 2 updates #6 — drops self-approval entirely)
• New: @25b2825c (PR Bump Meziantou.Framework.FullPath from 1.1.11 to 1.1.12 #7 — adds the hardened ai-agent-auto-merge tier)

Why

Without this bump, agent-authored PRs (claude/, jules/, copilot/) on this repo currently have no auto-merge fast lane — they wait for Owner or CodeRabbit-approved tiers. The new pin restores that lane with a hardened trust model:

• Requires pull_request.user.login (immutable bot identity)
• • matching branch prefix
• • draft == false

Different from the original spoofable github.actor + branch-only check.

Companion

• ANcpLua/ANcpLua.Agents already on this SHA
• ci(auto-merge): consume reusable workflow from renovate-config ANcpLua.Analyzers#107 (merged, uses @main so picks up automatically)
• ci(auto-merge): consume reusable workflow from renovate-config ANcpLua.NET.Sdk#103 (uses @main, will pick up on merge)

Test plan

• CI green
• Verify the resolved workflow contains the ai-agent-auto-merge job after merge

Summary by CodeRabbit

• Chores
  • Updated the auto-merge workflow configuration to reference a newer version.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: bac3df90-c2cf-4dff-a4e3-a7ac671ca09f

📥 Commits

Reviewing files that changed from the base of the PR and between f526447 and 1d750b7.

📒 Files selected for processing (1)

• .github/workflows/auto-merge.yml

Cache: Disabled due to data retention organization setting

Knowledge base: Disabled due to data retention organization setting

---

📝 Walkthrough

Walkthrough

The auto-merge workflow file is updated to use a newer commit of the referenced reusable workflow. The uses declaration on line 22 is modified to reference commit 25b2825cc61505ea8c06104f6a01c293fb935fe3 instead of 1e1c5c61fdf44a05a62a70aeada34219c23e1428. The modification preserves all other workflow configuration, including job triggers and permission scopes. This is a single-line update affecting only the reusable workflow reference.

✨ Finishing Touches

⚔️ Resolve merge conflicts

• Resolve merge conflict in branch chore/bump-auto-merge-pin-to-pr7

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[ANcpLua]

Superseded by #101 (Renovate auto-bumped the same digest while this PR was in flight). Main is already at 25b2825c.