Lock the cookbook versions in the project

[njlr]

How it might look in buckaroo.json:

{
  "name": "My Project",
  "cookbooks": {
    "buckaroo-official": {
      "repository": "git@github.com:LoopPerfect/buckaroo-recipes.git", 
      "branch": "master",
      "version": "735e204ab85cb8ace8af6e928051d626e491afc2"
    }
  },
...

We should track the branch because this allows us to upgrades.

[njlr]

Each entry in "cookbooks' is an alias on the location. We should update the dependency definition to contain the alias.

For example:

  "dependencies": {
    "buckaroo-official/google/gson": "1.0.0"
  },

[njlr]

Instead of this approach, 1.2.0 will use a lock file.