Fix handling of upstream deps in zinc.

A) Put them on the classpath.
B) Only provide upstream analysis if it actually exists.
C) Transform FQCNs to classfile paths, which is what the dep checker understands.

Auditors: pl