Loosen version range of concat-stream dependency

I think we can trust @maxogden and @isaacs to follow semver, and this prevents `collect-stream` from installing a redundant (and somewhat old) version of `concat-stream` in certain cases.