Configure renovate to update npm

[sxd]

Since we have inside the web/ directory the files package.json and package-lock.json file, we should have renovate to update these files, in the case of package-lock.json we may need another way to do it if renovate can't handle that file

[fcanovai]

That is already happening, see #286