chore(deps): pin cookie to ^0.7.2 (#2196)

This is being reported as an issue by our vuln checker, although
we are not affected by the vulnerability itself as mongosh does not
use HTTP cookies in production code.

Author: addaleax

package-lock.json

@@ -162,5 +162,8 @@
     "packages/node-runtime-worker-thread",
     "packages/browser-repl",
     "packages/connectivity-tests"
-  ]
+  ],
+  "overrides": {
+    "cookie": "^0.7.2"
+  }
 }