Avoid explicit URLs

The CLA Bot component currently uses explicit URLs (e.g. for the 'store'). Avoid this and prefer project ids.

Any transferred/renamed project then has a better chance of working. An explicit URL will break.