Configure Renovate to wait three days before proposing newly released
dependencies.
The policy requires a registry publication timestamp and suppresses
branches until the release ages past the window. Renovate security-alert
updates continue to bypass minimum-release-age checks, so known fixes
are not delayed.
Checked with `renovate-config-validator --strict --no-global
renovate.json`, `jq`, and `git diff --check`.
Signed-off-by: Jordan Mecom <jm@squareup.com>
