Dependency updates (#1216)

* Pin the Chakra CLI
There seems to be an incompatibility to do with the location of the theme types.
* Update DOMPurify 
Only breaking change is IE compatibility.

Author: microbit-matt-hillsdon