Add transitive npm deps to package.json

Note that this is a hacky workaround. We can't use lein-npm to handle transitive
npm deps correctly, because it refuses to run when package.json already exists.
Therefore, we're forced to pull them in ourselves.
Document build process. Fixes #13.