Lock dependencies

[unix1]

To ensure reproducible builds of the application, this PR locks dependencies (using dep) as much as possible to released stable versions. Note that the following dependencies:

• github.com/asergeyev/nradix
• github.com/elgs/gosqljson
• github.com/orcaman/concurrent-map
• github.com/shafreeck/configo

do not have release tags, so they are at master.

Also, adding vendor directory to the repo ensures that dependencies always remain available.

[mrjones-plip]

@unix1 - looks good! well, kinda too many changes to really check individually, but I trust you (and I'm no go developer ;) I merged & smoke tested by installing, compiling and ensuring the mon-01.xyz.foonet.net_2017-10-17.17-07.dmp.gz test file successful ingested. We're good to go!