meta: Sync package-lock.json with package.json

We mostly aren't using this, but while it's here
it may as well be up-to-date.