build(deps): bump semver and @accordproject/concerto-core (#552)

Bumps [semver](https://github.com/npm/node-semver) to 7.5.2 and updates ancestor dependency [@accordproject/concerto-core](https://github.com/accordproject/concerto/tree/HEAD/packages/concerto-cto). These dependencies need to be updated together.


Updates `semver` from 7.3.5 to 7.5.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.3.5...v7.5.2)

Updates `@accordproject/concerto-core` from 3.0.0 to 3.9.0
- [Release notes](https://github.com/accordproject/concerto/releases)
- [Commits](https://github.com/accordproject/concerto/commits/v3.9.0/packages/concerto-cto)

---
updated-dependencies:
- dependency-name: semver
  dependency-type: indirect
- dependency-name: "@accordproject/concerto-core"
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>