Set npm dependency update team as Renovate and npm audit reviewer

[tnotheis]

This PR routes Renovate and npm audit pull requests to the npm dependency update reviewers team.

Changes:

• replace existing Renovate reviewers with team:npm-dependency-update-reviewers where this repository has a root package-lock.json and Renovate config
• pass js-soft/npm-dependency-update-reviewers to the dependency security maintenance workflow

Validation:

• parsed Renovate JSON with jq
• parsed workflow YAML with Ruby
• checked touched files with Prettier