update to the latest sanford-protocol (v0.8.0)

This updates to the latest sanford-protocol which properly locks
down to the highest working version of bson 1.X.X.  This is needed
b/c bson 1.10.x has some bug.

/cc @jcredding