Fix vulnerabilities (microsoft#2682)

* Fix vulnerabilities

These changes include updating `code-push` dependency and running `npm audit fix`
The main goal is fixing ip vulnerability: GHSA-78xj-cgh5-2h22

* Run `npm audit fix` in demo apps

(cherry picked from commit 104cc38)

Author: DmitriyKirakosyan