Run dependencyGuard task during CI

Run the `dependencyGuard` task during CI, which will fail if there are
detected changes.

Also update the Renovate config to run the `dependencyGuardBaseline`
task, otherwise the auto-generated PRs would fail.

Change-Id: If5f2b18a4c765bd38a3353df2adaaa91cf1739c3

.github/renovate.json

@@ -12,5 +12,10 @@
       "matchPackageNames": ["com.google.protobuf"],
       "allowedVersions": "<=0.8.19"
     }
-  ]
+  ],
+  "postUpgradeTasks": {
+    "commands": [
+      "./gradlew app:dependencyGuardBaseline app-nia-catalog:dependencyGuardBaseline"
+    ]
+  }
 }

.github/workflows/Build.yaml

@@ -42,6 +42,9 @@ jobs:
       - name: Check spotless
         run: ./gradlew spotlessCheck --init-script gradle/init.gradle.kts --no-configuration-cache
 
+      - name: Check Dependency Guard
+        run: ./gradlew app:dependencyGuard app-nia-catalog:dependencyGuard
+
       - name: Run all local screenshot tests (Roborazzi)
         id: screenshotsverify
         continue-on-error: true