build(deps): bump ejs and webpack-bundle-analyzer in /demo/vue-cli2

Removes [ejs](https://github.com/mde/ejs). It's no longer used after updating ancestor dependency [webpack-bundle-analyzer](https://github.com/webpack-contrib/webpack-bundle-analyzer). These dependencies need to be updated together.


Removes `ejs`

Updates `webpack-bundle-analyzer` from 2.13.1 to 4.7.0
- [Release notes](https://github.com/webpack-contrib/webpack-bundle-analyzer/releases)
- [Changelog](https://github.com/webpack-contrib/webpack-bundle-analyzer/blob/master/CHANGELOG.md)
- [Commits](webpack-contrib/webpack-bundle-analyzer@v2.13.1...v4.7.0)

---
updated-dependencies:
- dependency-name: ejs
  dependency-type: indirect
- dependency-name: webpack-bundle-analyzer
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

demo/vue-cli2/package-lock.json

@@ -49,7 +49,7 @@
     "vue-style-loader": "^3.0.1",
     "vue-template-compiler": "^2.7.14",
     "webpack": "^3.6.0",
-    "webpack-bundle-analyzer": "^2.9.0",
+    "webpack-bundle-analyzer": "^4.8.0",
     "webpack-dev-server": "^2.9.1",
     "webpack-merge": "^4.1.0"
   },