Remove deprecated dependency on punycode

[hermanwenhe]

I have an issue from customer complaining about the deprecated package punycode. OfficeDev/OfficeAddinDevKit#15

Just did a check, it's from the node-fetch 2.6.1 which is a dependency from office-addin-cli. This version is 4 years ago so I think we do need to do an update to clean vulnerability.

I can help do the upgrade if you have limited bandwidth, but I'm not sure about the testing process after upgrading dependencies.

[millerds]

We have a work item (9518528) to review the dependencies that are outdated and update them.