fix: package.json & .snyk to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/npm:debug:20170905

Latest report for chetanraj/hapijs-mongoose-restapi:
https://snyk.io/test/github/chetanraj/hapijs-mongoose-restapi

Author: snyk-bot

.snyk

@@ -0,0 +1,8 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.7.1
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  'npm:debug:20170905':
+    - mongoose > mquery > debug:
+        patched: '2017-09-27T22:46:05.069Z'

package.json

@@ -6,7 +6,8 @@
   "license": "MIT",
   "dependencies": {
     "hapi": "^16.0.1",
-    "mongoose": "^4.7.1"
+    "mongoose": "^4.7.1",
+    "snyk": "^1.41.1"
   },
   "devDependencies": {
     "code": "^4.0.0",
@@ -21,6 +22,9 @@
     "xo": "xo",
     "flow": "flow",
     "test": "node_modules/lab/bin/lab",
-    "coveralls": "node_modules/lab/bin/lab -r lcov | node_modules/coveralls/bin/coveralls.js"
-  }
+    "coveralls": "node_modules/lab/bin/lab -r lcov | node_modules/coveralls/bin/coveralls.js",
+    "snyk-protect": "snyk protect",
+    "prepublish": "npm run snyk-protect"
+  },
+  "snyk": true
 }