Security bump and docs

• Docs updates - no longer recommending using the chron PR labeler. Rather, use the Github actions/labeler since it now supports pull_request_target and can run from the main branch when forks are attempting to PR.
• NPM security audit bump