fix: packages/create-next-app/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-BRACES-6838727
- https://snyk.io/vuln/SNYK-JS-MICROMATCH-6838728

packages/create-next-app/package.json

@@ -39,7 +39,7 @@
     "async-retry": "1.3.1",
     "chalk": "2.4.2",
     "commander": "2.20.0",
-    "cpy": "7.3.0",
+    "cpy": "9.0.0",
     "cross-spawn": "6.0.5",
     "got": "10.7.0",
     "prompts": "2.1.0",