Lock nock version for breaking older Nodes

Node 0.8 apparently can't handle `^x.x.x` SemVer ranges. Nock includes
that in a dependency in newer versions, so it's out until we drop 0.8
support.