Update build dependencies

Notably, cardboard 1.0 to 2.1, and the boxen puppet module from 0.2.0 to 3.3.4.