env: upgrade to lockfile v2, audit fix some devDeps

- newer versions of NPM use v2 of the lockfile
- run `npm audit fix` after as well to auto-update some devDeps

Author: agilgur5