schema: Fix optional Dependency.ImageID

This patch make Dependency.ImageID a pointer.

Unmarshalling a json without a dependency's ImageID will create an empty Hash
struct. On Marshall it will call assertValid that will correctly fail.