rewrote HOME dir lookup (no cgo)

The usage of `os/user` in `util/util.go TildeExpansion()` was the only cgo dep I could find.