Specify required version of JSON::XS

the snapshot shows the latest, but we weren't explicitly requiring it.