deps: rebuild package-lock (#6143)

This is a total rebuild of the package-lock.  The diff of the
package-lock was audited line by line and changes were assessed.  In all
but one case the only changes were semver-compatible bumps of
subdependencies, and a shuffling of the hoisting of some dev
dependencies (which don't affect the published package).

The only package that had to be manually re-hoisted was
`normalize-package-data`.  This was done by installing then uninstalling
the version we wanted hoisted (in this case it was semver major version
5).

node_modules/.gitignore

@@ -22,6 +22,7 @@
 !/@npmcli/installed-package-contents
 !/@npmcli/map-workspaces
 !/@npmcli/metavuln-calculator
+!/@npmcli/move-file
 !/@npmcli/name-from-folder
 !/@npmcli/node-gyp
 !/@npmcli/package-json
@@ -41,9 +42,6 @@
 !/aproba
 !/archy
 !/are-we-there-yet
-!/are-we-there-yet/node_modules/
-/are-we-there-yet/node_modules/*
-!/are-we-there-yet/node_modules/readable-stream
 !/balanced-match
 !/base64-js
 !/bin-links
@@ -173,7 +171,6 @@
 !/node-gyp/node_modules/@npmcli/
 /node-gyp/node_modules/@npmcli/*
 !/node-gyp/node_modules/@npmcli/fs
-!/node-gyp/node_modules/@npmcli/move-file
 !/node-gyp/node_modules/abbrev
 !/node-gyp/node_modules/are-we-there-yet
 !/node-gyp/node_modules/brace-expansion
@@ -192,6 +189,7 @@
 !/node-gyp/node_modules/minipass
 !/node-gyp/node_modules/nopt
 !/node-gyp/node_modules/npmlog
+!/node-gyp/node_modules/readable-stream
 !/node-gyp/node_modules/ssri
 !/node-gyp/node_modules/unique-filename
 !/node-gyp/node_modules/unique-slug