Convert dependency tracking to use gpm instead of godep

godep proved to be a bit ornery when trying to update packages. gpm, frankly, isn't much better, but is far less picky about directory paths and package locations.