Convert dependency tracking to use gpm instead of godep

godep proved to be a bit ornery when trying to update packages. gpm, frankly, isn't much better, but is far less picky about directory paths and package locations.


Ouch; looks like this clobbers any dependencies that are already in `$(GOPATH)`.