NEXUS-6862: Add npm static security

Also, apply same name scheme to ContentClass as we decided to go
with templates: use "npm" instead of "NPM", and this creates
consistency in generated role names like "view" role.

Issue
https://issues.sonatype.org/browse/NEXUS-6862

CI
TBD