remove godep in favor of gpm

[gpm](https://github.com/pote/gpm) is *exactly* the kind of lightweight tool we're looking for in order to automate reproducible builds from a list of dependencies.

Unfortunately godep went in a different (valid) direction.
in terms of date of bumps, that's all in the git history