Add 'origin' metadata to ROS dependencies

[cottsay]

While I don't think we should discriminate between dependency types for general use, this is useful metadata in some contexts and is easy to include.

Follows colcon/colcon-core#564