Use provided scope for tomcat dependencies

To make the WAR file deployable (people always seem to assume it will be) as
well as executable, you need the embedded container to *not* be on the
classpath in an external container.

I believe this fixes gh-10 and probably fixes gh-12