fix(rest): don't rely on transitive dependencies from express

[mgabeler-lee-6rs]

Fixes #1917

Checklist

• npm test passes on your machine
• New tests added or existing tests modified to cover all changes
• Code conforms with the style guide
• API Documentation in code was updated
• Documentation in /docs/site was updated
• Affected artifact templates in packages/cli were updated
• Affected example projects in examples/* were updated

Blank items above because there are no code changes in this PR

Ideally would like this to say, logically, "pull in whatever version of serve-static is used by express", but I'm not sure how to do that.

I've tried to verify this with my problem project where I found the issue, but I can't get pnpm to play nice with linked packages in the context of the rush monorepo. That said, the imports I've added here are exactly the same ones I added to that parent project as a workaround, so I'm reasonably confident this should work.

Note that only including @types/express-serve-static-core and not the base express-serve-static-core is quite intentional and a bit important -- see the issue report for why.