pin: Merge existing component.json with dependencies

This patch will merge any existing component.json
metadata with the found dependencies.  The prior
implementation would remove all metadata and only save
dependencies.

TLDR; now much easier to use with components (libraries)
rather than just apps.

Closes #2.
Add a quick example/test