update xtend

Removes sub-deps on two very old modules, `is-object` and `object-keys`. As far as I can tell, xtend's API is super stable and hasn't really changed. Tests pass. v0.1.1 would be nice so other modules can get this :)