Use scoped names in package.json, other housekeeping

[kring]

• Put all of our packages in the @cesium scope.
• Added "private": true so they can't inadvertently be published to npm.
• Ran npm audit fix
• Committed the new package-lock.json after the above.

[j9liu]

Thanks @kring !