Fixes peerDependencies being allowed even if they are devDeps

If a devDep is a peerDependency then it should be marked as extraneous
if `dev` is set to `false`.

This fixes npm/npm#5586