Support installing packages from sources

In DESCRIPTION:
Depends:
    foo,
    bar,
    baz
Sources:
    foo (git=git://github.com/bar/foo.git, branch=working),
    bar (url=http://my.package.repo.com/bar.tar.gz),
    baz (file=/app/vendor/baz.tar.gz)