Refactor various npm-related security templates

* Remove version-based directory structure
* Add single, per-tool ci template files, based upon configurable
  docker-registry.wikimedia.org images (via new env var)
* Update ci templates to support multiple, nested package/-lock.json files
* Add support for configurable tool options (via new env var)
* Other misc. cleanup
1 job for main in 46 seconds (queued for 3 seconds)