fix(patch.41): use @whatwg-node/fetch instead of cross-fetch

fix(patch.40): replace secureRandom with @hackbg/4mat

hoping this works everywhere as intended

fix(patch.39): more robust check for web crypto api

fix(1.9.3-patch.38): remove node:crypto code path

release(1.9.3-patch.37): fixing import expressions

release(1.9.3-patch.36): some import exprs still not patched?

release(1.9.3-patch.35): patch ImportExpression

fix(1.9.3-patch.34): dynamic imports?

fix(1.9.3-patch.33): rootDir?

release(1.9.3-patch.31)

move ubik from dependencies into devdependencies