fix(metrics): Add npm-shrinkwrap file for CC nodesecurity engine

Since the Code Climate nodesecurity engine runs its underlying tool in
`offline` mode, a `npm-shrinkwrap.json` file must be present during analysis.