Release 0.13.0

TL;DR

• The axios dependency is now ^1.20.0 (was ^1.13.6), fixing 34 advisories that affect 1.13.6; with axios 1.20, HTTPS requests via HTTPS_PROXY tunnel through CONNECT, so proxies no longer see X-Vault-Token.
• Proxies must therefore allow CONNECT to Vault's port (Squid's defaults block 8200), and one that never answers hangs requests despite timeout (workarounds: NO_PROXY, requestOptions.agentOptions.timeout).
• kubernetesLogin, addKubernetesRole, getKubernetesRole and deleteKubernetesRole without mount_point now use the client's kubernetesPath (default kubernetes) instead of requesting auth//…, broken since 0.10.3.
• addKubernetesRole (now taking Vault's token_* fields) and certLogin no longer reject with a TypeError when given arguments, and generateRootStatus is back with its typing; all three had been broken since 0.10.0.
• Maintenance: dev-only nyc 18.0.0 (was 15.1.0), dropping the transitive uuid; dev lockfile security updates; CI test image moved to Debian bookworm. Docs: README and example/unseal.js cover unsealing an initialized vault.

Pull requests

• Add unseal example and docs for already-initialized vaults (#295)
• fix: pass kubernetesPath into the mustache path context (#302)
• build(deps): bump form-data from 4.0.5 to 4.0.6 (#304)
• Fix Node 20 CI job by moving Docker base image to Debian bookworm (#305)
• fix(deps): bump axios to 1.20.0 and patch vulnerable transitive deps (#308)
• build(deps): bump uuid and nyc (#309)
• fix: restore generateRootStatus and repair addKubernetesRole/certLogin schemas (#312)
• chore(release): bump version (#313)