except keycloak from grouped update PRs

keycloak is a critical service
separating keycloak updates makes it easier to respond quickly to
critical updates or delay them when there are breaking changes

renovate.json

@@ -33,6 +33,9 @@
       "matchCurrentVersion": "!/^0/",
       "matchUpdateTypes": [
         "minor"
+      ],
+      "excludePackageNames": [
+        "git.hamburg.ccc.de/ccchh/oci-images/keycloak"
       ]
     },
     {