Carton v1.0 support

- Use cpanfile.snapshot instead of carton.lock
- Avoid using deprecated -I option