* PUBLIC_URL should now be provided as env var

* update deps to latest and pin min node & npm version
* checkin lock files
* make server serve client to merge both into one in order to reduce complexity
* adjust CSP accordingly

src: https://github.com/aamirpinger/todo-app-client-server-kubernetes/commit/93be212a344ea910b0a13f1110975bfdfd306f3a