Two init-behavior fixes, released as 0.9.4:

- Jira keys were hardcoded to DUCESP because the interactive prompt was
  commented out in the POC, so every repo got DUCESP even without a ticket.
  Now --jira > prior manifest > ask the user; Enter/no input leaves the
  keys empty ([]) instead of forcing a default.
- mergeDevDeps/installDeps no longer create or touch package.json when the
  target repo has none — those steps are skipped instead of scaffolding an
  unwanted package.json.