Consider allowing renovate to auto-merge PRs without approval

[lengau]

If renovate is the only user on a PR and all tests succeed, we can probably automatically squash & merge that PR. This would need to go alongside appropriate renovate configuration, but a configuration that automatically merges only patch updates would probably be sufficient.