feat(esm): convert to esm (#2569)

for #2543

BREAKING CHANGE: semantic-release is now ESM-only. since it is used through its own executable, the impact on consuming projects should be minimal

BREAKING CHANGE: references to plugin files in configs need to include the file extension because of executing in an ESM context

lib/definitions/plugins.js

@@ -1,12 +1,12 @@
 /* eslint require-atomic-updates: off */
 
-const {isString, isPlainObject} = require('lodash');
-const {getGitHead} = require('../git');
-const hideSensitive = require('../hide-sensitive');
-const {hideSensitiveValues} = require('../utils');
-const {RELEASE_TYPE, RELEASE_NOTES_SEPARATOR} = require('./constants');
+import {isPlainObject, isString} from 'lodash-es';
+import {getGitHead} from '../git.js';
+import hideSensitive from '../hide-sensitive.js';
+import {hideSensitiveValues} from '../utils.js';
+import {RELEASE_NOTES_SEPARATOR, RELEASE_TYPE} from './constants.js';
 
-module.exports = {
+export default {
   verifyConditions: {
     required: false,
     dryRun: true,