Improve dependencies in package.json

First, use ~ instead of ^ in order to reduce possible negative
surprises.

Second, as long as lmtm/gulp-marked#6 is not closed, use my own fork of
gulp-marked to make sure we use at least marked 0.3.

This is a possible fix for scy/bn#1.