move fetch into npm-registry-client

The primary purpose is so that everything doing network requests
includes auth, if so required. Sends bearer token by default, will send
HTTP Basic auth with `always-auth` set in the config.
2.0.0-alpha.6.0