This pulls in, installs, and de-dupes our subdependencies.
Notable updates are promise-retry and @npmcli/move-file which
had new versions but we had no way to update and/or dedupe
We also manually removed uuid from our package.json which was
only added in the past to try to get around this same deduping
issue
This addresses the inclusion of some dev dependencies that should not
have been included, due to a bug in Arborist 1.x which has been
corrected.
It also just moves some stuff around that was still in the tree shape
that npm 6 created, which is different than what npm v7 will create.
Several formerly dev deps were moved to production dependencies due to
the addition of resolve in normalize-package-data v3.
Reinstall everything from a clean node_modules and package-lock.json
state.
Re-generate list of bundleDependencies and node_modules/.gitignore with
a script that does the right thing based on actual dependency state.