remove godep in favor of gpm

[gpm](https://github.com/pote/gpm) is *exactly* the kind of lightweight tool we're looking for in order to automate reproducible builds from a list of dependencies.

Unfortunately godep went in a different (valid) direction.
fair