chore(deps): update dependency gitlab-org/caproni to v2.59.0

See merge request !771

chore(deps): update dependency gitlab-org/caproni to v2.60.1

See merge request !772

chore(deps): update dependency https://gitlab.com/gitlab-com/gl-infra/common-template-copier.git to v1.58.3

chore(deps): update dependency https://gitlab.com/gitlab-com/gl-infra/common-template-copier.git to v1.58.3

See merge request !775

chore(deps): update dependency helm/helm to v4.2.2

See merge request !773

chore(deps): update dependency metalbear-co/mirrord to v3.220.0

See merge request !776

Defining `_exclude` in copier.yml REPLACES copier's built-in
DEFAULT_EXCLUDE rather than extending it. The template only listed
`/.git/**`, which matches paths *under* .git but not the .git entry
itself, so copier walked .git during `copier update`.

In renovate's worktree-based template checkout, .git is a gitlink
*file*. Copier rendered it onto the target project's real .git
*directory*, where `read_bytes()` raised IsADirectoryError and the
recovery path's `assert is_dir` failed with AssertionError, aborting
every renovate template-update MR:

    IsADirectoryError: [Errno 21] Is a directory: '.../.git'
    ...
    assert is_dir
    AssertionError

Restore the full original DEFAULT_EXCLUDE (copier.yaml, copier.yml, ~*,
*.py[co], __pycache__, .git, .DS_Store, .svn) verbatim, replacing the
partial `/.git/**` and `/copier.yml` entries it subsumes.

Verified: reproduced the exact IsADirectoryError by rendering a gitlink
.git file into a destination with a real .git/ directory (crash before,
clean after); the keep/delete/conflict-releaserc update-scenario tests
still pass.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

fix: restore copier DEFAULT_EXCLUDE to exclude .git on update

See merge request !777