only read in rebar config and lock of dep if needed

Partial fix for https://github.com/rebar/rebar3/issues/34