* update pubspecs to null-safe dependencies * remove build_runner dep; upgrade quiver * use analysis_options.yaml to control analysis scope