Play Framework

chore(renovate): hold the fork's dependency-check plugin to the applications' version (PF-195)

Every dependency-check scan on a machine shares one NVD database, and a
dependency-check release may change its schema. On the Jenkins host the
nightly Dependency_Check_NVD_Update job, from the payments repo, writes
it at 12.2.2, and the fork's nightly scan reads it. A Renovate bump of
framework/dependency-check alone could leave the database unreadable to
one side, and /renovate would merge it as a config change, without a
scan. Updates to it are disabled; it is bumped by hand, together with
payments and api.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>