use new package.json `registry` property

With this, the `dependencies` object is properly handled and converted to be jspm-compatible by jspm instead of needing to be done manually.

It probably needs some deeper testing, we'll get there.