Add support for private npm & bower repos

a la https://github.com/thirdiron/heroku-buildpack-nodejs. This allows private github repos to be used as dependencies for either npm or bower. Private npm dependency URLs must be in the form of `git+ssh://git@github.com:[user]/[repo].git`. Private bower dependency URLs must be in the form of `git@github.com:[user]/[repo].git`. Either npm or bower URLs may have a trailing `#semver`.
True, but I still think we could scope it til the npm and bower installs are done. Right?