build(lockfile): Switch lockfile to npm-shrinkwrap.json

Its a try to get dependabot start analyzing the lockfile.
Currently, npm-shrinkwrap.json is not supported officially by dependabot
but the expectation is to get it working by moving to npm-shrinkwrap.json
after the first dependabot PRs are created,