Refresh transitive dependencies with open advisories; copy-webpack-plugin 14

The 7 open Dependabot alerts matched versions still pinned in yarn.lock. `yarn up -R` moves pbkdf2, source-map-js, http-cache-semantics and ajv to fixed versions within range. serialize-javascript came through copy-webpack-plugin 11 (^6); copy-webpack-plugin 14 asks for ^7.0.3 and resolves 7.1.2. Its use here is `patterns: [{ from: 'public' }]`; the chrome and firefox build zips are byte-identical before and after (41 files each, sha256).

Left: elliptic 6.6.1, for which no fixed version exists (via browserify-sign / create-ecdh).

packages/extension/package.json

@@ -30,7 +30,7 @@
     "@pezkuwi/dev": "^0.86.3",
     "browser-resolve": "^2.0.0",
     "buffer": "^6.0.3",
-    "copy-webpack-plugin": "^11.0.0",
+    "copy-webpack-plugin": "^14.0.0",
     "crypto-browserify": "^3.12.0",
     "file-loader": "^6.2.0",
     "html-loader": "^4.2.0",