Switch from `third_party.go` to `gom` for dependencies, fixes #80

This change pins the dependency versions we're using. It also removes
the alphagov fork of the redis library we were using because we can
reference the specific version we want.
Is there no way to pin version for this and the atom library above?