Add 'ensure-deps-repos for 'freshen and 'box-add commands.

The 'box-add metadata was brought into line with project.clj
originating metadata, being nested one level down under the key :voom.