Don't allow version 0.0.24 of the `tmp` package.

Version 0.0.24 of the `tmp` package breaks us, because it changes the
number of arguments to a callback function.  This is because the
`promisify` API in `prfun` is unnecessarily fragile; see
https://github.com/bower/bower/pull/1403#issuecomment-48784169
for some discussion.

Change-Id: I8bc3cd8b63907c68bfd4384d4dc25ad532752d02