replace os/user with go-homedir

os/user can't be used in cross-platform builds, hence we vendor a
cross-platform hack.