Update automation merged a major platform version without review

The dependency automation merged a major version of the single sign-on platform on its own, overnight, with no human review. That update is what caused the sign-on outage.

The configuration was meant to require approval for anything beyond a patch release, and did say so. A broader rule further down the file re-enabled automatic merging for every chart update and only carved out major versions, so minor versions merged unattended despite the stated intent.

Corrected so that only patch releases can merge without review, and so a minor version can no longer be grouped into a patch-level batch.