Bump adm-zip version for office-addin-manifest

[zsharpBDO]

adm-zip for office-addin-manifest is currently pinned to exactly v0.5.16, which has a CVE out (GHSA-xcpc-8h2w-3j85). Please bump to at least v0.5.18 to get the CVE out of the dependency chain

[bercovMSFT]

Thank you for reporting this, we have already added it to our backlog, with no timeline to share.

Internal tracking id: 7596076