fix(hard-host-depends): add mercurial

some go tools want mercurial for fetching dependencies. We need this.