Add support for godep to pin project dependencies

`godep` appears to be solid choice for pinning Go project dependencies.
This pull request contains a `Godeps` file with SHAs of dependency
revisions. Tests were run at the specified SHAs before freezing.