Fix missing deps on react

[belgattitude]

Purpose

Strict package managers like pnpm, yarn in pnp or pnpm mode won't allow next-secure-headers to access react.

So here's a fix. I've added react as dependency with a large range (16, 17 and 18).

For @types/node as it's seems only internal and typescript only, I just added them as an optional peerDependency... But it's not required, so I can remove it if you feel so.

By the way, thanks for this great lib.

PS:

As a workaround for yarn 2 or 3, it's possible to add the following in the yarnrc.yml

packageExtensions:
  "next-secure-headers@*":
    peerDependencies:
      react: ^17.0.0

[jagaapple]

Thank you!