Investigate use of `sinon` and replace with `tinyspy` where appropriate

See #247

Only replace where appropriate. e.g. repos which already use vitest should use the built in spy rather than sinon, see https://github.com/es-tooling/module-replacements/issues/247#issuecomment-4184441845

[dependents](https://gameroman.github.io/e18e-tools/?package=sinon)

[dev dependents](https://gameroman.github.io/e18e-tools/?package=sinon&dev=true)
