settings-site: phase 3 stack hygiene (express 5, drop node-fetch, engines, nvmrc)

settings-site/package.json

@@ -2,6 +2,9 @@
   "name": "broccolini-settings",
   "version": "1.0.0",
   "main": "server.js",
+  "engines": {
+    "node": ">=20"
+  },
   "scripts": {
     "start": "node server.js",
     "dev": "node --watch server.js"
@@ -10,10 +13,9 @@
     "cookie-parser": "^1.4.6",
     "csrf-csrf": "^4.0.3",
     "dotenv": "^16.0.0",
-    "express": "^4.18.0",
+    "express": "^5.1.0",
     "express-rate-limit": "^7.4.0",
     "express-session": "^1.17.3",
-    "helmet": "^8.0.0",
-    "node-fetch": "^2.7.0"
+    "helmet": "^8.0.0"
   }
 }