chore(dependencies): update convict dependency to v0.6

Older versions of convict depend on an insecure version of the validator
module.