fix(deps): exclude infra/sh/ from docker-compose fileMatch

The broad infra/*.yaml pattern was matching Ansible inventory,
group_vars, and molecule configs as docker-compose files. Use a
negative lookahead to exclude infra/sh/ (Ansible/Terraform).

Author: kzndotsh

.github/renovate.json5

@@ -208,9 +208,11 @@
   ignorePaths: ["**/.cursor/skills/**"],
   // Extend docker-compose file matching to include compose fragments under infra/
   // Default pattern only matches compose*.y{a,}ml and docker-compose*.y{a,}ml
+  // Exclude infra/sh/ (Ansible YAML, not compose)
   "docker-compose": {
     fileMatch: [
-      "(^|/)infra/.+\\.ya?ml$",
+      "(^|/)infra/(?!sh/).+\\.ya?ml$",
+      "(^|/)infra/[^/]+\\.ya?ml$",
     ],
   },
   // Use platform-native automerge (GitHub/GitLab built-in automerge)