fix dependency specification

• tilde dependency versions used incorrectly pinning releases and causing installation errors with "peer" packages

dependency updates

• bring dependencies up to date

initial backup functionality

• clone a set of repos specified in dependencies*.yml files
• snapshot repos at specified commit into tar file with corresponding SHA sum file
• package tar files and SHA sum files into tar file with it's own corresponding SHA sum file