Bump micromatch to 4.0.8

[tonicebrian]

My CI/CD is warning constantly about a security issue (see GHSA-952p-6rrq-rcjv) coming from micromatch that's a dependency from spago . Although authors claim that is minor (https://github.com/micromatch/micromatch/releases/tag/4.0.8) it is already solved and bumping the version would remove the warning and annoyance.