Switch to Hex.pm-based package dependencies

[jparise]

We still point to the same versions of lager (and goldrush) that we were using before.

This makes it easier for applications that use exlager to resolve their own lager dependencies without resorting to overrides.

[khia]

Sorry for the delay