Switch from `third_party.go` to `gom` for dependency management

This change moves us to use `gom` over the `third_party.go`
file to vendor and pin our dependencies.