Specify three-to-cannon 1.3.0 exactly

Future versions have a bug which is awkward to work around; for
now, make sure we don't accidentally upgrade.

See https://github.com/donmccurdy/three-to-cannon/issues/13.