release.yml does not exclude dependabot from the changelog #31

Reference: monoprop.

Our .github/release.yml excludes the author dependabot, but the actual login is dependabot[bot], so those commits still end up in the generated release notes.

changelog:
  exclude:
    authors:
      - dependabot[bot]
    labels:
      - dependencies
      - ty-update
      - ruff-update

Adjust the label list to whatever we end up using here.