github: Dependabot no longer infers .npmrc

Dependabot no longer infers .npmrc settings for npm private registries. Instead of reconstructing .npmrc from lockfile URLs, it will stop trying to guess configuration based on potentially incorrect lockfile data.

• Source: GitHub