CB-7255 Fixed writing plist unescaped

- Use current plist npm instead of plist-with-patches
- Solve resulting deprecation warnings

We originally switched to plist-with-patches to add some patches which didn't
get through to the upstream plist at the time. The upstream plist has those
fixes now, and some more.

github: close #70