Switch to npm v5 minimum

[grayside]

Once we are on Node 8 as minimum, let's go ahead and mandate npm v5. This will allow us to use package-lock.json, which is nicer than shrinkwrap.

1. Add this min version to the package.json engines.
2. Check out greenkeeper integration