Improve packaging

results of pairing with nightlyone:
* use go list to calculate dependencies
* use a clean buildroot using GOPATH
* go get uses also git and mecurial to fetch dependencies