chore(dependabot): hold k8s.io minor bumps at 0.36

[huskcass]

Adds an ignore rule to the gomod Dependabot entry so semver-minor and semver-major updates for k8s.io/* are skipped, while patch updates (0.36.x) still come through. The existing k8s group and the other ecosystems are unchanged.

Why:

• client-go is only guaranteed to work against a cluster of its own minor version.
• Our target clusters are on 1.36 or older.
• This keeps swiss on the same k8s minor as llm-operator.

sigs.k8s.io/controller-runtime isn't a direct dependency here, so it isn't in the rule. Replaces the minor bump in #10, which is closed.

[huskcass]

Verdict: APPROVE

No critical blockers. Config correctly ignores k8s.io/* major/minor while leaving patches open.

[imneov]

Dependabot version updates is paused.