Add commands to generate initial .go.yaml and to "freeze" the current versions of dependencies

These changes make it easier for folks to start using goat and to update dependencies without having to hand-edit their .go.yaml file.