@W-24125700 bump npm, fix bin path

[iowillhoit]

What does this PR do?

Fixes oclif bin path for: forcedotcom/cli#3644
Bumps npm for forcedotcom/cli#3642

Testing instructions

bin/dev was never published; the sf-trust bin link was silently skipped, breaking npm install. Now points at the published bin/run.js.

yarn build && npm pack
mkdir /tmp/t && cd /tmp/t && npm init -y
npm install <path>/salesforce-plugin-trust-*.tgz
ls -l node_modules/.bin/sf-trust        # link now exists
./node_modules/.bin/sf-trust --version  # runs

Before this fix the link is absent; after, it resolves to bin/run.js.

What issues does this PR fix or reference?

Bin path:
@W-24125700@
NPM bump:
@W-24125144@