When release_platform_enabled is true, suppress the renovate_bot job
on security mirror and build (dev.gitlab.org) instances using
noSecurity.noBuild guard rules.

- Add release_platform_enabled boolean input to renovate-bot component
- Wrap renovate_bot job rules with releasePlatform.noSecurity.noBuild.guard()
- Forward release_platform_enabled from standard template to renovate-bot
- Add noSecurity.noBuild test coverage in rules.manitest.jsonnet

AI-assisted: OpenCode (Claude Opus 4.6)

chore(deps): update dependency docker/cli to v29.4.0

See merge request !1422

Add release platform guard rules to renovate_bot job

See merge request !1415

## [3.18.0](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2026-04-14)

### Features

* add release platform guard rules to renovate_bot job ([cc809588](cc809588))

### Dependencies

* **deps:** update dependency docker/cli to v29.4.0 ([c521df0e](c521df0e))

fix(renovate): update renovate to 43.120.1 to fix semantic commit detection

See merge request !1430

## [3.18.1](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2026-04-14)

### Fixes

* **renovate:** update renovate to 43.120.1 to fix semantic commit detection ([3563789e](3563789e))