Upgrade dependencies where possible

[mourner]

Upgrades all dependencies (both direct and development ones) where possible, which should close most of our Dependabot security warnings. Caveats:

• eslint can't be upgraded from v7 to v8 because it doesn't support linting JSDoc examples, which is important for us Allow processor API to be configurable and to formally be able to lint both a file and its blocks eslint/eslint#14745
• flow-bin can't be upgraded past v0.142.0 without major updates to typings across the codebase — something to address separately.
• jsdom can't be upgraded because of Upgrade to JSDom v16+ #12185
• @mapbox/gazetteer (of which we only use one small JSON file for old benchmarks) was removed with that file added to the repo because the package doesn't seem to be actively maintained, and we win by getting rid of more unnecessary transitive dependencies.
• gl > v4.9.0 doesn't build on benchmap unfortunately, to be investigated separately.
• CI Node version had to be bumped to v14.16, but newer versions like v14.20, as well as my local machine, make 13 rendering tests (mostly related to star atmosphere) fail for unknown reason. This needs to be investigated separately.

Launch Checklist

• briefly describe the changes in this PR
• write tests for all new functionality
• manually test the debug page
• apply changelog label ('bug', 'feature', 'docs', etc) or use the label 'skip changelog'

[stepankuzmin]

Looks good to me 👍