Properly declare the release script's deps

Previously we made the assumption that `mixlib-shellout` is installed
on any machine that would execute the release script.