feat: Render NPM audit references as individual references

[aikebah]

Currently in a reported finding from NPM Audit API the references section is mangled due to the format in which NPM Audit API is sending the references: a concatenation of <dash><space><reference-URL> strings delimited by \n (escaped newlines)

That concatenation is copied verbatim into the report as the reference.

Describe the solution you'd like

Have the report contain the individual lines of the references attribute, nicely hyperlinked in the HTML report so that the link can be followed for inspection

Describe alternatives you've considered

Leaving the report as-is, requiring users to copy/paste the URLs by hand.

Additional context
Current rendering:

Proposed rendering: