deps: pin negotiator@0.4.5
docs: add NPM badge