Recurse into transitive dependencies when lockfile trusting

This Pull Request forces Berkshelf to evaluate nested dependencies for metadata, path locations, and scm locations. This makes the lockfile even more magical.

- Fixes #1043 
- Fixes #1025 
- Fixes #952 
- Closes #906

@berkshelf/core I think this about wraps up the lockfile things