Added missing semver dependency

config-defs.js requires semver but the module is not listed in npmconf's `package.json`. This is probably not an issue with the way npm uses it but it's causing a problem when using npmconf and npm-registry-client separately. I added the same version used by npm-registry-client.