Switch from `third_party.go` to `gom` for dependencies, fixes #80

This change pins the dependency versions we're using. It also removes
the alphagov fork of the redis library we were using because we can
reference the specific version we want.