Update to decompress-zip that includes fix for our issue.

The fix that they landed in decompress-zip is superior to the one that I had made (it's better for performance and does not involve platform checking). There have also been a handful of other improvements made to the library since the 0.0.1 release, so I changed the package.json to grab a specific SHA (which is what's checked into our repository now).