Rework automated versioning

[jeff-horton-ho-sas]

This repo ist still on version 1 of https://github.com/UKHomeOffice/sas-github-workflows. In V2 the versioning and tagging is done on merge of PR to main. By default these use ci --ignore-scripts. Because the repo used deprecated prepublish which only runs before npm ci and npm install the --ignore-scripts was causing the npm artefact to be published without the built js files.

I've updated the repo to use prepare which runs on install and publish.

There are some other issues with this workflow that I'm hoping to fix:

• The workflow does not have permission to push the semver tag
• In v2 the updated package.json and lockfile after npm version is not committed
  • In v1 package.json was committed, but package-lock.json was omitted leading them to get out of sync.

This copies the npm publish workflow from sas-github-workflows, with modifications to correct the above issues.

• Permissions: contents: read -> contents: write
• Added "Configure git" and "Commit version" steps

Once tested here, the changes will be submitted to sas-github-workflows and if accepted the custom workflow will be replaced with the shared v2 workflow.

Dependency updates
The module was failing to pass audit tests due to a large number of critical vulnerabilities. To fix this:

• Rollup -> v2
• Babel -> v7
• Eslint -> v8
• Jest -> v29

There a number of further changes to plugins and config for the above.