Clear up package name confusion

[joshmgross]

• GitHub Advisory Database identifies this repo as malware #500
• GHSA-v9m5-8c6w-p3m5

This repository is not the github-script package that's been identified as malware and it has never been published to the NPM registry.

Installing this repository as a repository package via NPM warns about this vulnerability due to the package.json name github-script. To clear up confusion, I've changed this name to @actions/github-script which is under our controlled Actions NPM scope.

[github-actions]

Hello from actions/github-script! (ed2e029)

[joshmgross]

Before this change:

~/projects/github-script-types
❯ npm i -D @actions/github-script@github:actions/github-script

added 38 packages, and audited 39 packages in 7s

1 critical severity vulnerability

Some issues need review, and may require choosing
a different dependency.

Run `npm audit` for details.

~/projects/github-script-types 7s
❯ npm audit                                                   
# npm audit report

github-script  *
Severity: critical
Malware in github-script - https://github.com/advisories/GHSA-v9m5-8c6w-p3m5
No fix available
node_modules/@actions/github-script

1 critical severity vulnerability

Some issues need review, and may require choosing
a different dependency.

Now:

~/projects/github-script-types
❯ npm i -D @actions/github-script@github:actions/github-script

changed 1 package, and audited 39 packages in 5s

found 0 vulnerabilities

~/projects/github-script-types 6s
❯ npm audit                                                   
found 0 vulnerabilities