chore: add workflow to upgrade @pulumi/aws-native workflow

[corymhall]

This PR adds a workflow that automates updating the @pulumi/aws-native dependency. This one is a special case because the metadata.json file also needs to be updated.

fixes #149

[corymhall]

Switching to ncu since it handles upgrading to the latest minor version.

[blampe]

Renovate could (probably?) handle this for you, e.g. #251

Let me know if you'd like to change anything about the current behavior. For example you can break aws-native out into its own group if you don't want to bundle it with other Pulumi deps.

Auto-approve/auto-merge doesn't currently work because it's still waiting for reviews. I'm planning on deploying a bot to stamp PRs if tests pass.

[corymhall]

@blampe

Renovate could (probably?) handle this for you

Can renovate run custom commands as part of the upgrade? We need to also update the metadata.json file.

[t0yv0]

The only non-standard AWS native dependency is borrowing the metadata json file (which we could alternatively express as a submodule). Happy to move this to renovate but probably also wouldn't block on it and just land this and fix later.

[blampe]

@blampe

Renovate could (probably?) handle this for you

Can renovate run custom commands as part of the upgrade? We need to also update the metadata.json file.

Right now it allows a make build command to run after it resolves dependencies, but you would need to declare that in a renovate.json5 local to this repo. We can tweak the name of the command. Running something before it resolves is currently unsupported, but in-progress AFAIK.