Bump the npm_and_yarn at /. security update group with 3 updates

Bumps the npm_and_yarn at /. security update group with 3 updates: [gulp-sass](https://github.com/dlmanning/gulp-sass), [node-sass](https://github.com/sass/node-sass) and [tough-cookie](https://github.com/salesforce/tough-cookie).


Updates `gulp-sass` from 4.0.2 to 5.1.0
- [Release notes](https://github.com/dlmanning/gulp-sass/releases)
- [Changelog](https://github.com/dlmanning/gulp-sass/blob/master/CHANGELOG.md)
- [Commits](dlmanning/gulp-sass@v4.0.2...v5.1.0)

Updates `node-sass` from 4.14.1 to 7.0.0
- [Release notes](https://github.com/sass/node-sass/releases)
- [Changelog](https://github.com/sass/node-sass/blob/master/CHANGELOG.md)
- [Commits](sass/node-sass@v4.14.1...v7.0.0)

Removes `tough-cookie`

Updates `node-sass` from 7.0.0 to 9.0.0
- [Release notes](https://github.com/sass/node-sass/releases)
- [Changelog](https://github.com/sass/node-sass/blob/master/CHANGELOG.md)
- [Commits](sass/node-sass@v4.14.1...v7.0.0)

---
updated-dependencies:
- dependency-name: gulp-sass
  dependency-type: direct:development
- dependency-name: node-sass
  dependency-type: direct:development
- dependency-name: tough-cookie
  dependency-type: indirect
- dependency-name: node-sass
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>