cleanup dependencies

[mshima]

• replace js-yaml with yaml
• replace winston with jhipster logger
• drop non used conf
• replace @types/lodash with @types/lodash-es, we use lodash-es
• override vulnerable ejs from ejs-lint

Closes https://github.com/jhipster/generator-jhipster/security/dependabot/35

---

Please make sure the below checklist is followed for Pull Requests.

• All continuous integration tests are green
• Tests are added where necessary
• The JDL part is updated if necessary
• jhipster-online is updated if necessary
• Documentation is added/updated where necessary
• Coding Rules & Commit Guidelines as per our CONTRIBUTING.md document are followed

When you are still working on the PR, consider converting it to Draft (below reviewers) and adding skip-ci label, you can still see CI build result at your branch.