Bump dependency on xpath-range

Since 7187d2a, Annotator doesn't polyfill Node type constants, so this
upgrades xpath-range to a release that doesn't rely on that behaviour.