Sort list of package dependencies

This prevents trivial differences in carton files on different machines,
and makes merging easier when keeping the file under version control.