package: use explicit nan commit with LLVM fix

For now… Waiting for a new nan release at this point.

Fixes #15.
package: pin dev dependency versions

After the Jade breakage this seems smart.
v0.2.1