Fix ci, more resilient shard auth
Updates all npm dependencies to remove vulnerable packages (at time of writing)
Tweaks shard auth to make pairing more resilient long term (ie: won't tank the entire instance if a shard reboots 3 hours into the app's lifetime)
Adds mechanisms for securing the shard API (but it's best if you use a web proxy to deny external access to the shard api)