New require-dev handling

fixes #719, #1185, #1330, #789, #640
fixes #1005 (update has now --dev enabled by default, install not, it can be disabled on update with --no-dev)