Feature pull flag

* Redesign of the (now deleted) vcs packages, into the dep packge using a VersionControl interface
* Add a --pull flag, now depman does not communicate with remote servers unless --pull is passed