feat(deps): use shrinkwrap instead of package lock

As node-core-utils are CLI tools, it makes more sense to use
shrinkwrap instead of package lock to allow users to install
the CLI globally while pining transitive dependencies.

Author: joyeecheung