github: Dependabot no longer infers .npmrc
Dependabot no longer infers .npmrc settings for npm private registries. Instead of reconstructing .npmrc from lockfile URLs, it will stop trying to guess configuration based on potentially incorrect lockfile data.