JSON validation doesn't require being inside `cows` directory

[oohwooh]

It's possible to add your .json file into the root directory and still pass validation. This is a really easy thing to miss when doing final human review. (See #45, #48)

We should update validate-pr.js to make sure the file is inside cows