packages.json: downgrade nan, bindings dep versions