🏗️🔧：give renovate the labels this repo uses

[DerekNonGeneric]

Renovate was configured with labels from the set this repository has
been moving away from, and one that never existed.

configured	exists here?
dependencies	yes, but a plain label being retired
deps-prod	no
build	yes, but a plain label being retired
deps-dev	yes, but a plain label being retired
security	yes, but a plain label being retired

deps-prod has never been a label on this repository, so the one label
meant to mark a production dependency update has never been applied to
one.

The config now names what the repository offers:

rule	labels
vulnerabilityAlerts	🗝️ Type: Security
dependencies	📦 Type: Dependencies
devDependencies	📦 Type: Developer Dependencies, 🏗️ Category: Build
lockFileMaintenance	📦 Type: Dependencies, 🔧 Type: Maintenance

Each name was copied out of the labels API and compared to it
byte for byte rather than typed. Two carry a variation selector
(U+FE0F), and an emoji that merely looks right would be dropped as
silently as deps-prod was.

The plain labels are left in place. They are on more than a hundred
closed pull requests, and deleting a label takes it off those too.

Verified

• every configured label matches a real one, compared by codepoint
• the file still parses as JSON5, checked with a parser that does throw
  on a malformed file
• nps test passes

Lock file maintenance matched no rule that sets labels, so #1853,
#1850 and #1849 all carry none. Those runs refresh pnpm-lock.yaml and
nothing else, which is a dependency update and a maintenance one, so
they now take both.

The two label sets are now one

The old plain labels were not renamed onto the emoji ones: GitHub
answers 422 already_exists for that, and both names were in use
anyway, so there was no spare name to rename into.

They were merged instead. Every issue and pull request carrying a plain
label had the emoji equivalent added, and the plain label was then
removed:

plain	items	merged into
dependencies	322	📦 Type: Dependencies
deps-dev	229	📦 Type: Developer Dependencies
build	229	🏗️ Category: Build
javascript	91	🟨 Code: JS/TS
ruby	4	💎 Code: Ruby
security	1	🗝️ Type: Security

325 unique items, 876 label additions, nothing lost: the run reports 0
remaining, and the arithmetic checks where a before figure was exact --
Developer Dependencies 144 + 229 = 373, Build 154 + 229 = 383, Security
2 + 1 = 3.

wontfix had no counterpart to merge into, so it was renamed rather
than merged: it is now 🙅 Type: Won't Fix, coloured to match its
nearest sibling, 💕 Type: Duplicate.

commit-queue could not be renamed until the queue understood the new
name, since the workflow that runs is the one on the base branch. That
went through #1860 and #1861, and it is 🚀 Status: Commit Queue now.

Every label on this repository is emoji-named as of this writing, and
nothing carrying an old one lost it.

Noticed while here, not fixed

nps verify.json does not catch a malformed JSON5 file. Replacing
.renovaterc.json5 with { oops: [1,, } still reports "Checked 21
files ... Found 1 info" and exits zero. This change was validated with
a parser that does throw.

Fixes #1549

[netlify]

✅ Deploy Preview for gh-pages-openinf ready!

Name	Link
🔨 Latest commit	1f91222
🔍 Latest deploy log	https://app.netlify.com/projects/gh-pages-openinf/deploys/6a8e0cc57628e90008389f50
😎 Deploy Preview	https://deploy-preview-1859--gh-pages-openinf.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.