Pin the dependencies in the published CLI via shrinkwrap

[joyeecheung]

Since ncu is generally installed via npm install -g it seems useful to pin the transitive dependencies down via npm-shrinkwrap.json

cc @nodejs/tsc

[joyeecheung]

cc @nodejs/security-wg