dependabot(npm): Fix package manifests directory

...which was causing dependabot to fail bumping javascript deps.

Signed-off-by: Stephen Augustus <[email protected]>

Author: justaugustus

.github/dependabot.yml

@@ -23,7 +23,7 @@ updates:
           - "golang.org/x/*"
   # For the website code in scorecards-site.
   - package-ecosystem: npm
-    directory: '/'
+    directory: '/scorecards-site'
     schedule:
       interval: daily
       time: '00:00'