Update node and npm versions, and then react and storybook versions.

[spco]

Also use the new 'overrides' to avoid vulnerabilities in tar and loader-utils.

This is to avoid a host of dependabot alerts. Not all can be fixed at this time.