chore: Update winston

[marikaner]

Context

As we have seen in the past, lodash is broken from a security perspective. The winston update fixes that.
Unfortunately in v3.3.1 of winston the maintainer added a git dependency that is causing pipelines of customers to fail.

This locks the winston version to the one healthy version 3.3.0. Locking is not necessary anymore since v3.3.2.
Closes SAP/cloud-sdk#206

Definition of Done

Please consider all items and remove only if not applicable.

• Tests created/adjusted for your changes.
• Release notes updated.
  • Provide sufficient context so that each entry can be understood on its own.
  • Be specific about names of functions, classes, modules, etc.
  • Describe when or where this is relevant
  • Use indicative and present tense. For example, write "Provide function name that does X in order to Y" over "Now X can be done by calling a new function".
• PR title adheres to conventional commit guidelines (please note that only fix: and feat: will end up in the release notes)
• If applicable: Properly documented (JSDoc of public API)
• If applicable: Check if node run doc still works.