chore(payments): add npm auditing to payments-server dependencies

[jaredhirsch]

Separated into two commits: one readable commit, and one with package-lock.json noise.

First commit: following the advice in the "enable security scanning of 3rd-party libraries and dependencies" checkbox in issue #1128, adds npm dependency auditing to the payments-server npm lint scripts as npm lint:deps. The audit-filter package requires an .npmrc file with a specific JSON format, so added that, too.

The second commit contains package-lock.json changes created by audit-filter automatically updating stale dependencies to eliminate known nsp errors.

[meandavejustice]

Test failed on a 503 pulling down node, prolly to do with the github outages

Step 1/23 : FROM node:12-stretch AS node-builder
12-stretch: Pulling from library/node

error pulling image configuration: received unexpected HTTP status: 503 Service Temporarily Unavailable
Exited with code 1

[shane-tomlinson]

r+