renovate: try to disable GitHub Actions updates differently

Follow-up to a9b1be555a #19954

Closes #19969

renovate.json

@@ -6,6 +6,16 @@
   ],
   "semanticCommitType": "ci",
   "packageRules": [
+    {
+      "matchManagers": [
+        "github-actions"
+      ],
+      "commitMessagePrefix": "GHA: ",
+      "labels": [
+        "CI"
+      ],
+      "enabled": false
+    },
     {
       "matchUpdateTypes": [
         "pin",
@@ -38,6 +48,7 @@
     {
       "description": "Schedule package updates on the 10th of each month",
       "matchPackageNames": [
+        "/codeql/i",
         "/ruff/i"
       ],
       "groupName": "monthly updates by name",