scorecard.dev is the "correct" domain.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>