add the --verify option

This is the second attempt at #535 - this time targeting the gulp 4 branch. I think I've tackled all the comments left in the original PR (#668) 
@pkozlowski-opensource It isn't promoting it. --verify should support all deps, normal/peer/dev otherwise we are going to get hosed with "bugs" like "--verify does not works"