[fix] ...and so must be the NPM version's badge URL

[ci skip]