set the locked version of a dependency with an scm location

this ensures that only version found in the scm is used in the final
resolution.
Merge pull request #963 from berkshelf/add-scm-deps-explicitly

Berkshelf 3 overrides custom cookbooks w/ "locked_version" of community cookbooks.