Clarify dependencies custom extension key

[carolynvs]

• The dependendencies custom extension was sometimes specified with its full key io.cnab.dependencies and in other places used its shorthand dependencies. I've updated the spec to be clear that the key to use is the full io.cnab.dependencies.
• Remove outdated info on Porter's dep resolution

Fixes #403