Shrinkwrap

- Give npm-shrinkwrap.json preferential cachebusting treatment
- If npm-shrinkwrap.json is absent, use package.json as the cachebuster and output a Pro Tip about shrinkwrapping
- Redirect npm's stderr output to stdout