package: Update debug

debug@2 uses `stderr` again, so may as well use the latest version.
Merge pull request #358 from stephenmathieson/deps/update-debug

package: Update debug