Upgrade winston dependency in CLI to v3

[Harjun751]

The CLI now outputs to ESM #2836

Winston v2 is used in CLI with a hacky workaround - upgrading winston to v3 allows us to use it directly in the ES module without any workarounds.