schema: Fix optional Dependency.ImageID

Unmarshalling a jsoni ImageManifest or programmaticaly creating an
ImageManifest without a dependency's ImageID will create an empty Hash
struct. On Marshall it will call assertValid that will correctly fail.

This patch make Dependency.ImageID a pointer.