Locks cookbook dependencies to known versions

Currently, the latest version of all dependencies are pulled.
If a depended-upon cookbook releases a new major version with breaking
changes, it could break the deis cookbook.

This commit locks cookbook versions to the minor release, which
should be safe as long as cookbook authors follow SEMVER conventions.