Warn on non-deps in bundleDeps, and add to dependencies

Re npm/npm#6282
v1.0.3