feat(ci): add version-bump workflow for Renovate PRs (#554)

## Summary
- Adds automated version bumping for Renovate dependency update PRs
- Uses the shared reusable workflow from `Unstructured-IO/infra`
- Automatically bumps `__version__.py`, updates `CHANGELOG.md`, and
refreshes `uv.lock`

## How it works
When Renovate opens or updates a PR, this workflow:
1. Detects which components were changed
2. Parses conventional commit messages to determine bump type
(major/minor/patch)
3. Bumps the version, updates changelog, and commits back to the PR
branch

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Moderate risk because it introduces an automated workflow that can
push commits (version/changelog/lockfile updates) to PR branches and
depends on external reusable workflow behavior and secrets
configuration.
> 
> **Overview**
> Adds a new GitHub Actions workflow `version-bump.yml` that runs on
`pull_request` events targeting `main` and, only for PRs opened by
`utic-renovate[bot]`, invokes the shared `Unstructured-IO/infra`
reusable workflow to automatically apply a patch version bump and update
the changelog and lockfile, committing changes back to the PR.
> 
> The workflow requests `contents: write` permission and wires required
Renovate app credentials and a private PyPI index URL via repo
vars/secrets.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
a427cba. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: lawrence-u10d

.github/workflows/version-bump.yml

@@ -0,0 +1,25 @@
+name: Version Bump
+
+on:
+  pull_request:
+    branches: [main]
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: write
+  pull-requests: read
+
+jobs:
+  version-bump:
+    if: github.event.pull_request.user.login == 'utic-renovate[bot]'
+    uses: Unstructured-IO/infra/.github/workflows/version-bump.yml@main
+    with:
+      component-paths: '["."]'
+      default-bump: patch
+      update-changelog: true
+      update-lockfile: true
+      renovate-app-id: ${{ vars.RENOVATE_APP_ID }}
+    secrets:
+      token: ${{ secrets.GITHUB_TOKEN }}
+      private-pypi-url: ${{ secrets.PRIVATE_PYPI_INDEX_URL }}
+      renovate-app-private-key: ${{ secrets.RENOVATE_APP_PRIVATE_KEY }}