Use `import/no-extraneous-dependencies` to ensure devDependencies only in tests

[jake-kramer]

This would help detect issues with a runtime dependency accidentally included as a dev dependency