fix(catalog): scheduled pipelines run renovate only

v2.6.0 set up catalog-as-runner but the first scheduled run kicked off a full image rebuild — rules:changes evaluates as 'all changed' on schedule, so every build/sim/lint job fired. Prepend 'never on schedule' to every non-renovate job. Scheduled pipelines now produce exactly one renovate job; commit/tag pipelines unchanged.