fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-MOMENT-2944238

Author: snyk-bot

package-lock.json

@@ -53,7 +53,7 @@
     "jstimezonedetect": "^1.0.7",
     "lodash": "^4.17.15",
     "marked": "^0.7.0",
-    "moment": "^2.24.0",
+    "moment": "^2.29.4",
     "moment-timezone": "^0.5.27",
     "nextcloud-password-confirmation": "^0.4.2",
     "nextcloud-router": "0.0.9",