Bump tough-cookie and pkg

Removes [tough-cookie](https://github.com/salesforce/tough-cookie). It's no longer used after updating ancestor dependency [pkg](https://github.com/vercel/pkg). These dependencies need to be updated together.


Removes `tough-cookie`

Updates `pkg` from 4.4.9 to 5.8.1
- [Release notes](https://github.com/vercel/pkg/releases)
- [Commits](vercel/pkg@4.4.9...5.8.1)

---
updated-dependencies:
- dependency-name: tough-cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn-security-group
- dependency-name: pkg
  dependency-type: direct:production
  dependency-group: npm_and_yarn-security-group
...

Signed-off-by: dependabot[bot] <support@github.com>