chore(renovate): batch all indirect Go deps into a single PR

Disable separateMajorMinor, separateMultipleMajor, and separateMinorPatch
on the go-indirect packageRule so Renovate collapses every indirect
Go dependency update into one branch/PR regardless of semver level.
Today Renovate splits indirects across separate branches per update
type (e.g. renovate/major-go-indirect), producing per-severity PRs
that churn nix/package.nix individually. Batching them is lower
maintenance noise and lets go mod tidy settle the whole set once.

Author: cpcloud

renovate.json

@@ -18,11 +18,14 @@
       "pinDigests": true
     },
     {
-      "description": "Group all indirect Go dependencies",
+      "description": "Group all indirect Go dependencies (major, minor, patch in one PR)",
       "matchManagers": ["gomod"],
       "matchDepTypes": ["indirect"],
       "groupName": "go-indirect",
-      "enabled": true
+      "enabled": true,
+      "separateMajorMinor": false,
+      "separateMultipleMajor": false,
+      "separateMinorPatch": false
     },
     {
       "description": "Group GitHub Actions updates",