package: depend on released json-file-plus 1.x

The 0.x was deprecated by author, probably well-intentioned, but just
causes npm install of strongloop to spew warning messages.
v2.9.0