Add @redwoodjs/auth package to CLI upgrade command

[thedavidprice]

closes #546

@peterp Due to inconsistent ways Yarn itself handles 1) workspaces and 2) tags (e.g. @canary), this one got a bit messy. It is working now:

• for each option, upgrade and @canary upgrade, it checks to see if Auth package is installed to determine if it should be included. yarn upgrade-interactive ... will do this by default. For yarn upgrade ...@canary, things were a bit messier. (Note: upgrade-interactive does not support tags)
• refuses to --dry-run with --canary options; canary effectively force updates to most recent canary, and the yarn outdated ... doesn’t know how to handle tags

The only annoying thing left to fixe is Listr duplicating the titles when I try to dynamically change them. This was working fine until I added the logic in the first step, 'Checking installed packages...'. Any thoughts about how to make the first two duplicates correctly go away? This used to happen on create-redwood-app.js and somehow you fixed it:

[peterp]

I think you could use something like this to determine which @redwoodjs packages are already installed:

yarn list --pattern @redwoodjs --json

[thedavidprice]

@peterp Thanks! And, yeah, I looked into that as well. Since this is only an issue when targeting @canary (e.g. using tags), I found it easier with the grep to get it out the door. But this doesn't support all edge case uses of --canary. I put a TODO comment in code about how to improve in the future.

The biggest annoyance was Listr title duplication. I worked around that by nesting the tasks.

All the logic is working well now. Will merge PR unless things seem missing or broken.