[Security] update outdated dependencies

[eatyourgreens]

Updates for outdated dependencies, including 12 security patches. See individual Dependabot commits for details.

Convert the tests to ESM, as Chai no longer supports CJS, and remove a couple of Chai plugins that weren't being used.

Fix the CI tests workflow so that it runs again.

Fix some outdated syntax in the Dockerfile.

WIth the changes here, npm outdated should only report @sentry/node as outdated. Upgrading Sentry from v7 to v8 breaks the tests, because Sugar is using some deprecated APIs.

npm audit should report 0 vulnerabilities on this branch (12 on the current production release.)

(base) jimodonnell@Jims-MBP sugar % git checkout production-release 
HEAD is now at 081aa63 Merge pull request #315 from zooniverse/dependabot/npm_and_yarn/sentry/node-7.108.0
(base) jimodonnell@Jims-MBP sugar % npm ci                         

added 395 packages, and audited 396 packages in 5s

36 packages are looking for funding
  run `npm fund` for details

12 vulnerabilities (1 low, 3 moderate, 8 high)

To address all issues, run:
  npm audit fix

Run `npm audit` for details.

• Includes test: Convert tests to ESM and upgrade Chai #297.

[eatyourgreens]

Updated to include a couple more security patches that were released this week.

[kieftrav]

@eatyourgreens - I bumped the version of engine.io to match both PFE and FEM before merging this PR. Thanks!

[eatyourgreens]

👍 dependabot had already bumped it to 6.6.2 in the lock file, but it didn't update package.json. Weird bit of semver trivia: the minor version isn't pinned for ^ if the patch version is 0, so ^6.3.0 will match 6.6.2, depsite being a completely different minor version. Your change should pin the minor version down.