Bump tough-cookie and @decidim/core

Removes [tough-cookie](https://github.com/salesforce/tough-cookie). It's no longer used after updating ancestor dependency [@decidim/core](https://github.com/decidim/decidim/tree/HEAD/packages/core). These dependencies need to be updated together.


Removes `tough-cookie`

Updates `@decidim/core` from 0.26.8 to 0.28.0
- [Release notes](https://github.com/decidim/decidim/releases)
- [Changelog](https://github.com/decidim/decidim/blob/v0.28.0/CHANGELOG.md)
- [Commits](https://github.com/decidim/decidim/commits/v0.28.0/packages/core)

---
updated-dependencies:
- dependency-name: tough-cookie
  dependency-type: indirect
- dependency-name: "@decidim/core"
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>