Pin docker image versions and implement Renovate workflow

Currently our devkit's docker-compose.yml specifies :latest on most of our dependent images.

This means different people will get a different environment locally when they docker-compose up depending on when they last docker-compose pulld.

We should consider pinning specific versions, so that particular revisions of this analytics devkit repo provide a reproducible environment. This means that changing versions of CubeJS, Clickhouse etc becomes intentional actions.

RenovateBot could be used to make staying up to date less of a maintenance effort.