Some tweaks to sample profiles

[ethomson]

1. Add display names to our profiles
2. Update the sample Dependabot rule to look at package.json in the base (and rename it as such) instead of looking for it in docs/. This is more widely applicable than the prior example.
3. The GitHub Actions workflow security profile could benefit from the inclusion of a dependabot rule type for actions
4. The sample remediation profile should not allow actions to update PRs (similar to Allowing actions to update pull requests is dangarous #78)
5. The dependencies sample profile can make use of dependabot 🎉
6. Add a repository-configuration-focused sample profile