Added a guide about managing software dependencies

This follows on from a conversation on the GOV.UK developers mailing list. @jystewart was particularly interested in having something in place on the topic so if whoever merges could make sure James has seen it before then.