package.json: Pin dependency on node-forge to avoid breakage.

We have had stuff break twice due to Forge changing. This ensures we
control when we update Forge.