minor copy edits to NPM_Security_Cheat_Sheet.md

[zburke]

What this PR addresses

Minor copy editing; no content changes.

• Spelling
• Consistently surround package.json with backticks
• Remove extra commas, apostrophes, spaces
• etc

Checklist

• All the markdown files do not raise any validation policy violation, see the policy.
• All the markdown files follow these format rules.
• The CI build of your PR pass, see the build status here.

AI Tool Usage Disclosure (required for all PRs)

Please select one of the following options:

• I have NOT used any AI tool to generate the contents of this PR.
• I have used AI tools to generate the contents of this PR. I have verified
  the contents and I affirm the results. The LLM used is [llm name and version]
  and the prompt used is [your prompt here]. [Feel free to add more details if needed]

Thank you again for your contribution 😃

[Copilot]

Pull request overview

This PR applies copy edits to the NPM security cheat sheet to improve readability and consistency (notably around punctuation and package.json formatting) while keeping the guidance substantively the same.

Changes:

• Standardizes package.json formatting (backticks) and cleans up phrasing/punctuation.
• Fixes typos (for example “lifecycle”) and improves sentence flow in multiple sections.
• Minor wording tweaks for clarity (for example removing unnecessary commas / apostrophes).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[mackowski]

@zburke looks good! Please review coplilot review and fix markdown issues

[mackowski]

@zburke now I see some conflicts with main branch