[fix] adds semver to dependencies

config-defs.js requires semver but the module is not in the deps.
This is probably not an issue with the way npm uses it but it's
causing a problem when using npmconf and npm-registry-client
separately. Added the same version used by npm-registry-client.