chore: update cmd-shim and move it to devDependencies (#6127)

It's only used in the `linkBin` function, which is used for setting up
testing projects.

Author: haoqunjiang

packages/@vue/cli/package.json

@@ -32,7 +32,6 @@
     "@vue/cli-ui-addon-webpack": "^4.5.8",
     "@vue/cli-ui-addon-widgets": "^4.5.8",
     "boxen": "^4.1.0",
-    "cmd-shim": "^3.0.3",
     "commander": "^2.20.0",
     "debug": "^4.1.0",
     "deepmerge": "^4.2.2",
@@ -62,6 +61,9 @@
     "vue-codemod": "^0.0.4",
     "yaml-front-matter": "^4.1.0"
   },
+  "devDependencies": {
+    "cmd-shim": "^4.0.2"
+  },
   "engines": {
     "node": "^10.12.0 || ^12.0.0 || >= 14.0.0"
   }