fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-1056767
- https://snyk.io/vuln/SNYK-JS-MARKED-1070800

package.json

@@ -40,11 +40,11 @@
     "autoprefixer": "^9.8.6",
     "cheerio": "^0.22.0",
     "fibers": "^5.0.0",
-    "handlebars": "^4.7.6",
+    "handlebars": "^4.7.7",
     "jstransformer-handlebars": "^1.1.0",
     "junk": "^3.1.0",
     "lodash.defaultsdeep": "^4.6.1",
-    "marked": "^1.2.5",
+    "marked": "^2.0.0",
     "metalsmith": "^2.3.0",
     "metalsmith-collections": "^0.9.0",
     "metalsmith-discover-helpers": "^0.1.1",