Use the mysql-patcher pkg for database patching

Kill semver range operator (`^`)? It looks like the only dep/devDep with one.
Also, does this need a new npm-shrinkwrap.json bump?