Update in-range dependencies and override serialize-javascript

Routine maintenance to pick up patch/minor releases of @clack/core,
@clack/prompts, axios, eslint, nock, sinon.

Adds an override for serialize-javascript@^7.0.5 to address a
transitive vulnerability via mocha (GHSA-5c6j-r48x-rmvq,
GHSA-qj8w-gfj5-8c6v). 7.0.5 is the patched upstream version and is
backwards compatible with mocha's usage. npm audit now reports zero
vulnerabilities.

Major version bumps deferred to separate PRs:
- c8 10 -> 11, chai 5 -> 6, eslint 9 -> 10, glob 11 -> 13,
  globals 16 -> 17, sinon 21 -> 22

Author: stooit