npm: make bower a hard dependency

Bower is not just used for development, it is needed for production
too (deployment). This change makes 'npm install --production' work.